CVE-2020-1956

Published: 2020-05-22T14:15Z

Last Modified: 2025-03-06T19:48Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Apache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate os command with the user input string, a user is likely to be able to execute any os command without any protection or validation. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt