Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Pinot

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-39676

    Apache Pinot: Unauthorized endpoint exposed sensitive information

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot. This issue affects Apache Pinot: from 0.1 before 1.0.0. Users are recommended to upgrade to version 1.0.0 and configure RBAC, which fixes the issue. Details:  When using…

    Apache Software Foundation Apache Pinot org.apache.pinot:pinot-controller Maven
  • High 7.5
    CVE-2022-23974

    Pinot segment push endpoint has a vulnerability in unprotected environments

    In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disr…

    Apache Software Foundation Apache Pinot org.apache.pinot:pinot Maven