Lucene search
GoogleOSV:GHSA-MGPF-HHGF-CXG4HistoryJan 08, 2022 - 12:43 a.m.
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin.
2022-01-0800:43:16
Google
osv.dev
13
apache kylin
cross-origin requests
credentials
security issue
version 4.0.0
EPSS
0.001
Percentile
51.1%
In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions; Apache Kylin 4 version 4.0.0 and prior versions.
Related
prion
prion
Design/Logic Flaw
2022-01-06 13:15:00
github
github
osv
osv
CVE-2021-45457
2022-01-06 13:15:08
nvd
nvd
CVE-2021-45457
2022-01-06 13:15:08
cnvd
cnvd
Apache Kylin Access Control Error Vulnerability
2022-01-07 00:00:00
cve
cve
CVE-2021-45457
2022-01-06 13:15:08
veracode
veracode
Cross-Site Request Forgery (CSRF)
2022-01-07 07:30:03
cvelist
cvelist
CVE-2021-45457 Overly broad CORS configuration
2022-01-06 12:35:22