Apache Kylin Files or Directories Accessible to External Parties Vulnerability

A vulnerability allowing files or directories to be accessed by external parties has been identified in Apache Kylin versions 4.0.0 prior to 5.0.2. This issue arises from improper restrictions on file read access. While the vulnerability exists, it can be mitigated if Kylin's system and project admin access is properly secured.

Impact

Exploitation of this vulnerability could lead to unauthorized access to files or directories, potentially exposing sensitive information.

Remediation

Users are advised to upgrade to Apache Kylin version 5.0.3, which addresses this vulnerability.