Threats tagged 'ghsa-rfxx-8jfp-h6qv'

Apache Kylin versions 4.0.0 through 5.0.4 contain a vulnerability where resource allocation occurs without limits or throttling. An attacker with project admin permissions can exploit a cache API to cause resource exhaustion related to computed columns. This can lead to denial of service conditions. The issue is fixed in version 5.0.5.