https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:32:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03521 bdu:2025-03521 https://cve.radiocsirt.org/vuln/bdu:2025-03521 https://cve.radiocsirt.org/vuln/cnvd-2025-10036 cnvd-2025-10036 https://cve.radiocsirt.org/vuln/cnvd-2025-10036 https://cve.radiocsirt.org/vuln/euvd-2026-238400 EUVD-2026-238400 https://cve.radiocsirt.org/vuln/euvd-2026-238400 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48944 <p>Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke &#34;/kylin/api/xxx/diag&#34; api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the &#34;/kylin/api/xxx/diag&#34; api</p> <p>endpoint open for service.</p> <p>This issue affects Apache Kylin: from 5.0.0 through</p> <p>5.0.1.</p> <p>Users are recommended to upgrade to version 5.0.2, which fixes the issue.</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke &#34;/kylin/api/xxx/diag&#34; api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the &#34;/kylin/api/xxx/diag&#34; api</p> <p>endpoint open for service.</p> <p>This issue affects Apache Kylin: from 5.0.0 through</p> <p>5.0.1.</p> <p>Users are recommended to upgrade to version 5.0.2, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-48944 https://cve.radiocsirt.org/vuln/ghsa-3v67-545x-ffc3 <p><strong>Affected:</strong> Maven: org.apache.kylin:kylin-common-server</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke &#34;/kylin/api/xxx/diag&#34; api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the &#34;/kylin/api/xxx/diag&#34; api endpoint open for service.</p> <p>This issue affects Apache Kylin: from 5.0.0 through 5.0.1.</p> <p>Users are recommended to upgrade to version 5.0.2, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.kylin:kylin-common-server</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke &#34;/kylin/api/xxx/diag&#34; api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the &#34;/kylin/api/xxx/diag&#34; api endpoint open for service.</p> <p>This issue affects Apache Kylin: from 5.0.0 through 5.0.1.</p> <p>Users are recommended to upgrade to version 5.0.2, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-3v67-545x-ffc3