exploitDog

CVE-2026-62393

Опубликовано: 14 июл. 2026

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects.

This issue affects Apache Kylin: from 4 through 5.0.3.

Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Ссылки

https://lists.apache.org/thread/xg8dcyjw0nkq5y8dhq3r25x3rxc62x9j
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/07/14/6
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:kylin:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 5.0.4 (исключая)

EPSS

Процентиль: 21%

0.00288

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-280

Связанные уязвимости

GHSA-9rx7-cp4p-rwx4

CVSS3: 4.3

github

29 дней назад

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

EPSS

Процентиль: 21%

0.00288

Низкий

4.3 Medium

CVSS3

Дефекты

CWE-280