~ / search / GHSA-mr9j-4j48-xcm2

GHSA-mr9j-4j48-xcm2

Apache Kylin Authentication Bypass Vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2025-61733

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.kylin:kylin >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-core-common >= 4.0.0, < 5.0.3 5.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Authentication Bypass Using an Alternate Path or Channel vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.