Threats tagged 'ghsa-8p62-58r2-prmw'

Apache Kylin versions from 4.0.0 through 5.0.4 contain a critical vulnerability involving missing authentication for an in-house broadcast feature combined with a polymorphic deserialization flaw. This vulnerability primarily impacts Kylin services exposed directly to public networks, which is uncommon in typical in-house deployments. The issue is resolved in version 5.0.5.