CVE-2025-61735

published 2025-10-02

CVE-2025-61735: Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the…

high 7.3 CVSS 3.1

AV N AC L PR N UI N S U C L I L A L

Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin.

This issue affects Apache Kylin: from 4.0.0 through 5.0.2. You are fine as long as the Kylin's system and project admin access is well protected.

Users are recommended to upgrade to version 5.0.3, which fixes the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	kylin	>= 4.0.0 < 5.0.3	5.0.3
apache_software_foundation	apache_kylin	4.0.0 – 5.0.2	—

CWE-918