[
https://issues.apache.org/jira/browse/KYLIN-6101?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18121774#comment-18121774
]
liyang commented on KYLIN-6101:
-------------------------------
Fixed in 5.0.3 by commit 22eb8fd5dfdeffa3fc57bae6d5c82a019eece662. The
metadata-backup RPC now validates the caller-supplied host against the
configured cluster before making an outbound request. Closing as fixed.
> Potential SSRF issue in metadata backup handling
> ------------------------------------------------
>
> Key: KYLIN-6101
> URL: https://issues.apache.org/jira/browse/KYLIN-6101
> Project: Kylin
> Issue Type: Bug
> Reporter: liyang
> Priority: Major
>
> Security issue reported for Apache Kylin. This public issue tracks
> remediation; technical details remain in the private ASF security process.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
