Description
Apache Pinot 1.3 版本以下存在认证绕过漏洞，攻击者可构造恶意请求绕过相关权限认证，调用相关后台功能，造成敏感信息泄漏等。
Apache Pinot存在认证绕过漏洞（CVE-2024-56325）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-56325
https://github.com/advisories/GHSA-6jwp-4wvj-6597
https://www.zerodayinitiative.com/advisories/ZDI-25-109/
https://avd.aliyun.com/detail?id=AVD-2024-56325
https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v
https://www.codeant.ai/blogs/cve-2024-56325
https://security.snyk.io/vuln/SNYK-JAVA-ORGAPACHEPINOT-9637840
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2024-1759.html
https://www.sentinelone.com/vulnerability-database/cve-2024-56325/
https://www.ddpoc.com/DVB-2025-9462.html