← Back
CVE-2024-56325
Apache Pinot Vulnerable to Authentication Bypass
Summary
Apache Pinot Vulnerable to Authentication Bypass
Affected packages
maven
org.apache.pinot:pinot-broker
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0"}]}]
maven
org.apache.pinot:pinot-common
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0"}]}]
maven
org.apache.pinot:pinot-controller
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0"}]}]
References
- web https://nvd.nist.gov/vuln/detail/CVE-2024-56325
- web https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v
- web http://www.openwall.com/lists/oss-security/2025/03/27/8
- web https://github.com/apache/pinot/pull/14383
- web https://github.com/apache/pinot/commit/1b87488aeaf4836e3ef25b426ebbf1ad5a68e68f
- web https://github.com/apache/pinot/releases/tag/release-1.3.0
- web https://github.com/apache/pinot/commit/89a22f097c5ff26396e58950c90d764066a56121
- web https://github.com/advisories/GHSA-6jwp-4wvj-6597