{"action":"Upgrade org.apache.kylin:kylin to 4.0.1 or later.","affected":[{"fixed":"4.0.1","introduced":"0"}],"component":"org.apache.kylin:kylin","cve_ids":["CVE-2021-45456"],"ecosystem":"Maven","epss":0.88887,"exploited":false,"fixed_versions":["4.0.1"],"ghsa_id":"GHSA-hw3m-8h25-8frw","id":"tcs_01M5N91EM9JC4MD9PHJWB2Z9CW","modified_at":"2024-12-04T05:35:38.514924Z","published_at":"2022-01-08T00:42:59Z","references":["https://osv.dev/vulnerability/GHSA-hw3m-8h25-8frw","https://nvd.nist.gov/vuln/detail/CVE-2021-45456","https://github.com/apache/kylin/pull/1781","https://github.com/apache/kylin/commit/f4daf14dde99b934c92ce2c832509f24342bc845","https://github.com/apache/kylin","https://lists.apache.org/thread/70fkf9w1swt2cqdcz13rwfjvblw1fcpf","http://www.openwall.com/lists/oss-security/2022/01/06/1"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-hw3m-8h25-8frw","url":"https://osv.dev/vulnerability/GHSA-hw3m-8h25-8frw"}],"summary":"Command Injection in Apache Kylin"}