CVE-2022-44621

Severity

CRITICAL

CVSS

9.8

EPSS

0.0299

Risk score

40.25

CISA KEV

PoC

Published

2022-12-30

Modified

2025-04-11

First seen

2026-08-07

Aliases

EUVD-2022-7758, GHSA-W9RV-XMF7-X3GH

Products

Apache Software Foundation:Apache Kylin Apache Kylin 4 ≤4.0.2

Sources

Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.