Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
ApachePinot

4 matches found

CVE
CVE•added 2025/04/01 9:7 a.m.•587 views

CVE-2024-56325

Apache Pinot

9.8CVSS9.7AI score0.7819EPSS
Web
CVE
CVE•added 2022/04/05 7:55 p.m.•123 views

CVE-2022-23974

CVE-2022-23974 affects Apache Pinot 0.9.3 and older: the segment upload path allowed importing segment directories into Pinot tables in environments where the controller is openly accessible. The issue can be exploited by a specially crafted request to disrupt Pinot service. Remediation: upgrade ...

7.5CVSS7.4AI score0.01996EPSS
CVE
CVE•added 2024/07/24 7:41 a.m.•97 views

CVE-2024-39676

CVE-2024-39676 affects Apache Pinot (versions 0.1 up to, but not including, 1.0.0). The vulnerability arises from exposing sensitive information via the /appconfigs endpoint due to insufficient access controls. Exploitation could disclose system details (arch, OS version), environment info (maxHe...

7.5CVSS6AI score0.00846EPSS
CVE
CVE•added 2022/09/23 8:5 a.m.•75 views

CVE-2022-26112

CVE-2022-26112 affects Apache Pinot 0.10.0 and earlier, where Groovy function support is enabled by default in the Pinot query endpoint and realtime ingestion layer, causing a vulnerability in unprotected environments. The issue is mitigated by disabling Groovy support by default beginning with P...

9.8CVSS9.4AI score0.0133EPSS