org.apache.pinot:pinot-controller@0.9.0 vulnerabilities
latest version
1.3.0
latest non vulnerable version
first published
6 years ago
latest version published
2 months ago
licenses detected
- [0.1.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.pinot:pinot-controller package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel due to improper handling of specific path conditions in the authentication process, where the path does not contain How to fix Authentication Bypass Using an Alternate Path or Channel? Upgrade | [,1.3.0) |
Affected versions of this package are vulnerable to Information Exposure through the Note: This is only exploitable if the Role-Based Access Control (RBAC) is not properly configured. How to fix Information Exposure? Upgrade | [0.1,1.0.0) |
Affected versions of this package are vulnerable to Improper Input Validation in unprotected environments due to a groovy function support. How to fix Improper Input Validation? Upgrade | [0,0.11.0) |