You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@kylin.apache.org by "Shao Feng Shi (Jira)" <ji...@apache.org> on 2022/07/21 09:00:00 UTC

[jira] [Updated] (KYLIN-5214) Fix CVE-2022-22978 in Kylin

     [ https://issues.apache.org/jira/browse/KYLIN-5214?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Shao Feng Shi updated KYLIN-5214:
---------------------------------
    Description: Spring security need to be upgraded. See https://spring.io/blog/2022/05/15/cve-2022-22978-authorization-bypass-in-regexrequestmatcher

> Fix CVE-2022-22978 in Kylin
> ---------------------------
>
>                 Key: KYLIN-5214
>                 URL: https://issues.apache.org/jira/browse/KYLIN-5214
>             Project: Kylin
>          Issue Type: Improvement
>            Reporter: Shao Feng Shi
>            Priority: Minor
>
> Spring security need to be upgraded. See https://spring.io/blog/2022/05/15/cve-2022-22978-authorization-bypass-in-regexrequestmatcher



--
This message was sent by Atlassian Jira
(v8.20.10#820010)