漏洞描述
【漏洞对象】Apache Kylin 【涉及版本】Kylin 2.x.x,Kylin <= 3.1.0,Kylin 4.0.0-alpha【漏洞描述】Apache Kylin是一个开源的、分布式的分析型数据仓库。攻击者可构造恶意请求，访问API地址，可以获取ApacheKylin的相关配置信息，从而导致身份凭证等信息泄漏。
Apache Kylin API未授权访问漏洞(CVE-2020-13937)
PoC代码
暂无相关漏洞推荐
-
CVE-2020-13937: Apache Kylin Exposed Configuration File POC
2025-09-01 | Apache KylinApache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6... -
CVE-2020-13937: Apache Kylin - Exposed Configuration File POC
2025-08-01 | Apache KylinApache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6... -
CVE-2020-1956: Apache Kylin 3.0.1 - Command Injection Vulnerability POC
2025-08-01 | Apache KylinApache Kylin 2.3.0, and releases up to 2.6.5 and 3.0.1 has some restful apis which will concatenate ... -
CVE-2020-10199: Nexus Repository before 3.21.2 allows JavaEL Injection POC
2025-09-01 | Nexus Repository漏洞触发需要任意账户权限 body="Nexus Repository Manager" app="Nexus-Repository-Manager" -
CVE-2020-11455: LimeSurvey 4.1.11 - Path Traversal POC
2025-09-01 | LimeSurveyLimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/a...