CVE-2020-13937 PoC — Apache Kylin 安全漏洞

Source

https://github.com/yaunsky/CVE-2020-13937

Associated Vulnerability

Title: Apache Kylin 安全漏洞 (CVE-2020-13937)
Description:Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any authentication, so it is dangerous because some confidential information entries will be disclosed to everyone.

Description

Apache Kylin API未授权访问漏洞;CVE-2020-13937;Apache Kylin漏洞

Readme

# Apache Kylin API未授权访问漏洞（CVE-2020-13937

Fofa:title="Kylin"

### 使用方法

使用帮助：python3 cve-2020-13937.py --help

单一检测：python3 cve-2020-13937.py -u http://127.0.0.1

批量检测：python3 cve-2020-13937.py -f target.txt

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →