漏洞描述
ApacheKylin是一个开源的分布式分析引擎，它为Hadoop等大型分布式数据平台之上的超大规模数据集提供亚秒级的交互式分析能力，通过标准SQL查询及多维分析（OLAP）功能，使用户能够处理TB乃至PB级别的分析任务。kylin存在命令注入漏洞，攻击者通过默认账号密码进入系统执行任意命令，获取系统权限。
Apache Kylin 操作系统命令注入漏洞(CVE-2020-13925)
PoC代码
暂无相关漏洞推荐
-
CVE-2020-13937: Apache Kylin Exposed Configuration File POC
2025-09-01 | Apache KylinApache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6... -
CVE-2020-13937: Apache Kylin - Exposed Configuration File POC
2025-08-01 | Apache KylinApache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6... -
CVE-2020-1956: Apache Kylin 3.0.1 - Command Injection Vulnerability POC
2025-08-01 | Apache KylinApache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate ... -
CVE-2020-10199: Nexus Repository before 3.21.2 allows JavaEL Injection POC
2025-09-01 | Nexus Repository漏洞触发需要任意账户权限 body="Nexus Repository Manager" app="Nexus-Repository-Manager" -
CVE-2020-11455: LimeSurvey 4.1.11 - Path Traversal POC
2025-09-01 | LimeSurveyLimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/a...