Skip to content
Snippets Groups Projects
Commit 70365cba authored by Michael Henriksen's avatar Michael Henriksen
Browse files

Update CVE-2022-26112.yml

parent 66afb690
No related branches found
No related tags found
Loading
Pipeline #652758152 passed
......@@ -3,7 +3,7 @@ identifier: "CVE-2022-26112"
identifiers:
- "CVE-2022-26112"
package_slug: "maven/org.apache.pinot/pinot"
title: "TODO: Add proper title"
title: "Improper Control of Generation of Code ('Code Injection')"
description: "In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and
realtime ingestion layer has a vulnerability in unprotected environments due to
a groovy function support. In order to avoid this, we disabled the groovy function
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment