CVE-2024-48944
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 27, 2025
Updated: Apr 1, 2025
CWE ID 918
Summary
CVE-2024-48944 is a Server-Side Request Forgery (SSRF) vulnerability affecting Apache Kylin. An attacker with administrative access to a Kylin server can exploit this issue to forge requests, invoking the "/kylin/api/xxx/diag" API on another internal host. If the endpoint is open for service, leaked information may result. This vulnerability affects Apache Kylin versions 5.0.0 through 5.0.1. To mitigate this risk, users are advised to upgrade to version 5.0.2, which includes the necessary patch to resolve the issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Apache Kylin
Affected Vendors
- Apache