Description
Apache Pinot 1.0 版本以下存在敏感信息泄露漏洞，攻击者可构造恶意请求获取服务器敏感信息。
Apache Pinot 存在敏感信息泄露漏洞(CVE-2024-39676)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-39676
https://github.com/advisories/GHSA-8gj9-r4hv-3jjw
https://cve.imfht.com/detail/CVE-2024-39676?lang=en
https://avd.aquasec.com/nvd/2024/cve-2024-39676/
https://www.appsecure.security/vulnerability-database/cve-2024-39676/
https://securityonline.info/cve-2024-39676-apache-pinot-flaw-exposes-sensitive-data-urgent-upgrade-needed/
https://access.redhat.com/security/cve/cve-2024-39676
https://lists.apache.org/thread/hsm0b2w8qr0sqy4rj1mfnnw286tslpzc