Description

In the fix for CVE-2022-24697, a blacklist is used to filter user input commands. But there is a risk of being bypassed. The user can control the command by controlling the kylin.engine.spark-cmd parameter of conf.

Remediation

References

https://lists.apache.org/thread/ob2ks04zl5ms0r44cd74y1xdl1rzfd1r

Related Vulnerabilities

CVE-2021-41109 Vulnerability in npm package parse-server

CVE-2023-3432 Vulnerability in maven package net.sourceforge.plantuml:plantuml

CVE-2022-36083 Vulnerability in npm package jose-node-cjs-runtime

CVE-2023-48796 Vulnerability in maven package org.apache.dolphinscheduler:dolphinscheduler-standalone-server

CVE-2021-44791 Vulnerability in maven package org.apache.druid:druid

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Mailing List Patch Vendor Advisory NVD-CWE-Other