CVE-2020-13937

CVE-2020-13937 is a medium-severity information disclosure vulnerability affecting Apache Kylin versions 2.0.0 through 3.1.0 and 4.0.0-alpha. An unauthenticated RESTful API endpoint exposes sensitive configuration information, potentially disclosing confidential data. The vulnerability has a CVSS score of 5.3, indicating low impact on confidentiality with no integrity or availability impact, and can be exploited remotely with low attack complexity. While there is no evidence of active exploitation or public exploit code like Metasploit or ExploitDB entries, Nuclei templates exist, and its high EPSS score suggests a significant likelihood of future exploitation. Community discussion and media coverage are minimal.