1. CVE-Search
  2. CVE-2022-26112
ID CVE-2022-26112
Summary In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, we disabled the groovy function support by default from Pinot release 0.11.0. See https://docs.pinot.apache.org/basics/releases/0.11.0
References
Vulnerable Configurations
  • cpe:2.3:a:apache:pinot:0.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.9.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.9.0:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.9.1:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.9.1:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.9.2:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.9.2:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.9.3:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.9.3:*:*:*:*:*:*:*
  • cpe:2.3:a:apache:pinot:0.10.0:*:*:*:*:*:*:*
    cpe:2.3:a:apache:pinot:0.10.0:*:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 26-09-2022 - 17:22
Published 23-09-2022 - 08:15
Last modified 26-09-2022 - 17:22
Back to Top