Non notée
CVE-2022-23974 In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot…
Description
In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release 0.10.0 fixes this. See https://docs.pinot.apache.org/basics/releases/0.10.0
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Pinot 0.9 | premières → 0.9.3 | Pas de correctif indiqué |
Références
- lists.apache.org lists.apache.org
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Pinot
Les 5 CVE de Apache Pinot →
CVE-2026-73322
Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot
Non notée
CVE-2024-56325
Authentication Bypass Issue
If the path does not contain / and contain., authentication is not required
Non notée
CVE-2024-39676
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot
Non notée
CVE-2022-26112
In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in…
9.8
Critique