Description
Apache Kylin存在命令注入漏洞，此漏洞是由于缺乏校验导致的。
Apache Kylin命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/hktalent/MyDocs/blob/main/Apache-Kylin-%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E-CVE-2020-13925.md
https://www.gdust.edu.cn/jszx/wlaq1/xxtb/index.aspx?id=204
https://www.secrss.com/articles/50667
https://avd.aliyun.com/product?prod=kylin
https://netc.shcmusic.edu.cn/2023/0110/c1811a46358/pagem.htm
https://rivers.chaitin.cn/blog/cq94abh0lnechd242rlg
https://zhuanlan.zhihu.com/p/160150409
https://www.oscs1024.com/hd/MPS-2022-3633
https://forum.90sec.com/t/topic/1068
https://www.cnvd.org.cn/patchInfo/show/395541
https://wlaq.dlut.edu.cn/info/1095/4494.htm
https://www.sohu.com/a/399691864_99938775
https://cloud.baidu.com/article/290847
https://y4er.com/posts/cve-2021-45456-apache-kylin-command-injection/
https://lists.apache.org/thread/70fkf9w1swt2cqdcz13rwfjvblw1fcpf
https://it.ucsf.edu/apache-kylin-command-injection-vulnerability
https://www.tenable.com/plugins/was/114984
https://seclists.org/oss-sec/2025/q3/247
https://www.miggo.io/vulnerability-database/cve/CVE-2022-43396
https://rewterz.com/threat-advisory/multiple-apache-kylin-vulnerabilities
https://www.sentinelone.com/vulnerability-database/cve-2020-13925/
https://www.vicarius.io/vsociety/posts/cve-2021-45456-apache-kylin-command-injection
https://snort.org/rule_docs/1-59334
https://www.cnblogs.com/escape-w/p/archive/2023/02/24
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:APACHE:KYLIN-RNSPRK-CMDINJ.html
https://nvd.nist.gov/vuln/detail/CVE-2020-1956
https://securitylab.github.com/advisories/GHSL-2021-1048_GHSL-2021-1051_Apache_Kylin/