Junglewise Threat Intelligence

CVE-2025-61735: Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

CVE-2025-61735 · Severity: low · CVSS 3.1 · Published 2025-10-02

Technologies: org.apache.kylin:kylin (Maven), org.apache.kylin:kylin-common-server (Maven), org.apache.kylin:kylin-core-common (Maven). Vendors: Maven.

Executive brief

Apache Kylin Server-Side Request Forgery (SSRF) Vulnerability

Affected products

  • Maven org.apache.kylin:kylin-common-service
  • Maven org.apache.kylin:kylin
  • Maven org.apache.kylin:kylin-server
  • Maven org.apache.kylin:kylin-ops-server
  • Maven org.apache.kylin:kylin-common-server
  • Maven org.apache.kylin:kylin-core-metadata
  • Maven org.apache.kylin:kylin-core-common

Related threats