Session Fixation vulnerability in Apache Kylin
CVE-2024-23590

Currently unrated

Key Information:

Vendor
Apache
Status
Apache Kylin
Vendor
CVE Published:
4 November 2024

Summary

Session Fixation vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 2.0.0 through 4.x.

Users are recommended to upgrade to version 5.0.0 or above, which fixes the issue.

Affected Version(s)

Apache Kylin 2.0.0 < 5.0.0

References

https://lists.apache.org/thread/7161154h0k6zygr9917qq0g95...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

XJB Security Team
.