Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support
Résumé
Pinot query endpoint and the realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, we disabled the groovy function support by default from Pinot release 0.11.0. See https://docs.pinot.apache.org/basics/releases/0.11.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org