CVE-2022-24697

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Apache Software Foundation	Apache Kylin	>= Apache Kylin 2, < 2.6.6; >= Apache Kylin 3, <= 3.1.2; >= Apache Kylin 4, <= 4.0.1

References

http://www.openwall.com/lists/oss-security/2022/12/30/1Mailing List, Patch, Third Party Advisory
https://lists.apache.org/thread/07mnn9c7o314wrhrwjr10w9j5s82voj4Mailing List, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/12/30/1Mailing List, Patch, Third Party Advisory
https://lists.apache.org/thread/07mnn9c7o314wrhrwjr10w9j5s82voj4Mailing List, Patch, Vendor Advisory

Timeline

Published: Oct 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-24706.1Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.21.CVE-2022-247007.5An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to caus CVE-2022-247017.8An issue was discovered in WinAPRS 2.9.0. A buffer overflow in national.txt processing allows a local attacker to cause a denial of service CVE-2022-247029.8An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code ex CVE-2022-247049.8The rad_packet_recv function in opt/src/accel-pppd/radius/packet.c suffers from a buffer overflow vulnerability, whereby user input len is c CVE-2022-247059.8The rad_packet_recv function in radius/packet.c suffers from a memcpy buffer overflow, resulting in an overly-large recvfrom into a fixed bu CVE-2022-247069.8In Apache CouchDB prior to 3.2.2, an attacker can access an improperly secured default installation without authenticating and gain admin pr CVE-2022-247078.8Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection CVE-2022-247085.4Anuko Time Tracker is an open source, web-based time tracking application written in PHP. ttUser.class.php in Time Tracker versions prior to CVE-2022-247096.1@awsui/components-react is the main AWS UI package which contains React components, with TypeScript definitions designed for user interface CVE-2022-24719.8Stack-based Buffer Overflow vulnerability in the EZVIZ Motion Detection component as used in camera models CS-CV248, CS-C6N-A0-1C2WFR, CS-DB CVE-2022-247105.4Weblate is a copyleft software web-based continuous localization system. Versions prior to 4.11 do not properly neutralize user input used i