~ / search / GHSA-p86w-w5rh-m3hx

GHSA-p86w-w5rh-m3hx

Apache Kylin Files or Directories Accessible to External Parties

Source: GitHub Advisory Database (reviewed) High CVE-2025-61734

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.kylin:kylin >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-common-server >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-common-service >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-core-common >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-core-metadata >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-ops-server >= 4.0.0, < 5.0.3 5.0.3
Maven org.apache.kylin:kylin-server >= 4.0.0, < 5.0.3 5.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Files or Directories Accessible to External Parties vulnerability in Apache Kylin. You are fine as long as the Kylin's system and project admin access is well protected. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. Users are recommended to upgrade to version 5.0.3, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.