CVE-2022-44621

Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@apache.org

Published

2022-12-30

Last modified

2025-04-11

Weaknesses

CWE-77

Affected products

• Kylin (Apache)
• Apache Kylin (Apache Software Foundation)

References

• https://lists.apache.org/thread/7ctchj24dofgsj9g1rg1245cms9myb34