CVE-2021-36774

Apache Kylin allows users to read data from other database systems using JDBC. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Kylin server processes. This issue affects Apache Kylin 2 version 2.6.6 and prior versions; Apache Kylin 3 version 3.1.2 and prior versions.

• http://www.openwall.com/lists/oss-security/2022/01/06/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/lchpcvoolc6w8zc6vo1wstk8zbfqv2owMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/01/06/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread/lchpcvoolc6w8zc6vo1wstk8zbfqv2owMailing List, Vendor Advisory

Published

Jan 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-36769A reordering issue exists in Telegram before 7.8.1 for Andro…5.3
• CVE-2021-3677A flaw was found in postgresql. A purpose-crafted query can …6.5
• CVE-2021-36770Encode.pm, as distributed in Perl through 5.34.0, allows loc…7.8
• CVE-2021-36771Zoho ManageEngine ADManager Plus before 7110 allows reflecte…6.1
• CVE-2021-36772Zoho ManageEngine ADManager Plus before 7110 allows stored X…6.1
• CVE-2021-36773uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support…7.5
• CVE-2021-36775a Improper Access Control vulnerability in SUSE Rancher allo…8.8
• CVE-2021-36776A Improper Access Control vulnerability in SUSE Rancher allo…8.8
• CVE-2021-36777A Reliance on Untrusted Inputs in a Security Decision vulner…8.8
• CVE-2021-36778A Incorrect Authorization vulnerability in SUSE Rancher allo…7.5
• CVE-2021-36779A Missing Authentication for Critical Function vulnerability…9.6
• CVE-2021-3678showdoc is vulnerable to Use of Cryptographically Weak Pseud…5.9