Threats tagged 'ghsa-f4w3-hpxf-cwrr'

A path-confinement bypass vulnerability exists in Apache Kylin versions 4.0.0 through 5.0.4 during metadata backup deletion. This flaw primarily impacts Kylin services exposed directly to public networks, which is uncommon. In-house deployments are generally not affected. The issue is resolved in version 5.0.5.