CVE-2024-56325

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d...

CVE-2024-56325 Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d...

CVE-2024-56325 Apache Pinot: Authentication bypass issue. If the path does not contain / and contain . authentication is not required

Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X POST -H "Content-Type: application/json" -d...

CVE-2024-56325

Apache Pinot versions prior to 1.3.0 are vulnerable to an authentication bypass issue within the AuthenticationFilter class. The root cause is the insufficient neutralization of special characters in a URI; specifically, if a path does not contain / and contains ., authentication is not required....

CVE-2024-56325

creationtimestamp| type| source ---|---|--- 2025-03-03 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-109/ 2025-03-04 11:00:09+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114103812642418026 2025-03-11 03:21:18+00:00| seen|...