CVE-2020-1937

MEDIUM6.5EPSS 6.3%

SQL Injection in Kylin

Published: 7/27/2020Modified: 11/8/2023

Description

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1MEDIUM6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

References (7)