Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Pinot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-56325 Scanner template EPSS 80%

    Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required

    Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component…

    Apache Software Foundation Apache Pinot org.apache.pinot:pinot-controller org.apache.pinot:pinot-common Maven
  • Critical 9.8
    CVE-2022-26112

    Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support

    In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, we disabled the groovy function support by default from Pi…

    Apache Software Foundation Apache Pinot org.apache.pinot:pinot Maven