Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-1937

CVE-2020-1937:
SQL Injection in Kylin

6.5

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-1937
GHSA ID
GHSA-7hmh-8gwv-mfvq
EPSS Score
0.92708%
CWE
CWE-89
Published
7/27/2020
Updated
2/1/2023
KEV Status
No
Technology
TechnologyJava

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
org.apache.kylin:kylin-server-basemaven< 2.6.52.6.5
org.apache.kylin:kylin-server-basemaven= 3.0.03.0.1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

Kylin **s som* r*st*ul *pis w*i** will *on**t*n*t* SQLs wit* t** us*r input strin*, * us*r is lik*ly to ** **l* to run m*li*ious **t***s* qu*ri*s.

Reasoning

No *n*lysis *v*il**l*