CVE-2021-45457: Insufficiently Protected Credentials

January 6, 2022 (updated July 12, 2022)

In Apache Kylin, Cross-origin requests with credentials are allowed to be sent from any origin. This issue affects Apache Kylin 2 and prior versions; Apache Kylin 3 and prior versions; Apache Kylin 4 and prior versions.

References

www.openwall.com/lists/oss-security/2022/01/06/2
lists.apache.org/thread/rzv4mq58okwj1n88lry82ol2wwm57q1m
nvd.nist.gov/vuln/detail/CVE-2021-45457

Code Behaviors & Features

Detect and mitigate CVE-2021-45457 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →