Severity: low 

Affected versions:

- Apache Kylin 4.0.0 through 5.0.2

Description:

Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long 
as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

This issue is being tracked as KYLIN-6082 

Credit:

liuhuajin <[email protected]> (finder)

References:

https://kylin.apache.org/
https://www.cve.org/CVERecord?id=CVE-2025-61735
https://issues.apache.org/jira/browse/KYLIN-6082

Reply via email to