CVE-2024-56325

Summary

CVE-2024-56325 is a critical authentication bypass vulnerability that allows unauthorized access to a system. If the request path does not include a slash ("/") and the character ".", authentication is bypassed, making it possible for attackers to access protected resources without providing valid credentials. For instance, using a malicious request, an attacker can add a new user to the Pinot system without going through the authentication process. The expected and malicious request and response examples provided in the description illustrate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.