CVE-2020-1937

Publication date

2020-02-24 20:57:52

Family

apache

State

PUBLISHED

Description

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.