Package · Maven

org.apache.pinot:pinot-controller

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2024-56325 Scanner template EPSS 80%

Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component…

Apache Software Foundation Apache Pinot org.apache.pinot:pinot-controller org.apache.pinot:pinot-common Maven

Apr 1, 2025
High 7.5

CVE-2024-39676

Apache Pinot: Unauthorized endpoint exposed sensitive information

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot. This issue affects Apache Pinot: from 0.1 before 1.0.0. Users are recommended to upgrade to version 1.0.0 and configure RBAC, which fixes the issue. Details: When using…

Apache Software Foundation Apache Pinot org.apache.pinot:pinot-controller Maven

Jul 24, 2024