{"action":"Upgrade org.apache.kylin:kylin-server-base to 2.6.5 (2.x) or 3.0.1 (3.x) or later.","affected":[{"fixed":"2.6.5","introduced":"0"},{"fixed":"3.0.1","introduced":"3.0.0"}],"component":"org.apache.kylin:kylin-server-base","cve_ids":["CVE-2020-1937"],"ecosystem":"Maven","epss":0.0307,"exploited":false,"fixed_versions":["2.6.5","3.0.1"],"ghsa_id":"GHSA-7hmh-8gwv-mfvq","id":"tcs_01M5N8JFJZ11SA68TB4YN1780G","modified_at":"2023-11-08T04:02:46.239064Z","published_at":"2020-07-27T22:51:47Z","references":["https://osv.dev/vulnerability/GHSA-7hmh-8gwv-mfvq","https://nvd.nist.gov/vuln/detail/CVE-2020-1937","https://github.com/apache/kylin/commit/e373c64c96a54a7abfe4bccb82e8feb60db04749","https://github.com/apache/kylin","https://lists.apache.org/thread.html/r021baf9d8d4ae41e8c8332c167c4fa96c91b5086563d9be55d2d7acf@%3Ccommits.kylin.apache.org%3E","https://lists.apache.org/thread.html/r61666760d8a4e8764b2d5fe158d8a48b569414480fbfadede574cdc0@%3Ccommits.kylin.apache.org%3E","https://lists.apache.org/thread.html/rc574fef23740522f62ab3bbda4f6171be98aa7a25f3f54be143a80a8%40%3Cuser.kylin.apache.org%3E","https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEKYLIN-552148"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-7hmh-8gwv-mfvq","url":"https://osv.dev/vulnerability/GHSA-7hmh-8gwv-mfvq"}],"summary":"SQL Injection in Kylin"}