Executive brief
Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
Affected products
- Maven org.apache.kylin:kylin-common-server
Junglewise Threat Intelligence
CVE-2024-48944: Apache Kylin Server-Side Request Forgery (SSRF) via `/kylin/api/xxx/diag` Endpoint
CVE-2024-48944 · Severity: medium · CVSS 4 · Published 2025-03-27
Technologies: org.apache.kylin:kylin-common-server (Maven). Vendors: Maven.