Liuhuajin

**Name of the Vulnerable Software and Affected Versions** Apache Kylin versions 4.0.0 through 5.0.2 **Description** A flaw exists in Apache Kylin that could allow external parties to access files or directories. Proper protection of Kylin's system and project admin access is crucial to prevent exploitation. **Recommendations** Upgrade to version 5.0.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apache Kylin versions 4.0.0 through 5.0.2 **Description** A Server-Side Request Forgery (SSRF) issue exists in Apache Kylin. The impact is limited if Kylin's system and project admin access is well protected. **Recommendations** Upgrade to version 5.0.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apache Kylin versions 4.0.0 through 5.0.2 **Description** An authentication bypass issue exists in Apache Kylin. This allows bypassing normal authentication mechanisms through an alternate path or channel. **Recommendations** Upgrade to version 5.0.3 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apache Seata (incubating) versions 2.0.0 through 2.1.x **Description** The issue is related to the deserialization of untrusted data, which can lead to remote code execution. This issue affects Apache Seata (incubating) from version 2.0.0 before 2.2.0. Users are recommended to upgrade to version 2.2.0 to fix the issue. **Recommendations** For Apache Seata (incubating) versions 2.0.0 through 2.1.x, upgrade to version 2.2.0 to resolve the issue.