CyberRota Analysis
AI-GeneratedA critical SQL injection vulnerability exists in Apache Kylin versions 4 through 5.0.3, allowing attackers to manipulate SQL commands through a backend API that refreshes the table catalog. This flaw could lead to unauthorized data access or modification, posing significant risks to data integrity and confidentiality. Organizations using affected versions should prioritize upgrading to version 5.0.4 to mitigate this severe security risk.
Original NVD Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Kylin. A backend API refreshing table catalog may cause the injection to the generated SQL. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.
Related CVEs
Other vulnerabilities affecting the same vendor(s)