CVE-2024-56325: Apache Pinot Vulnerable to Authentication Bypass

The vulnerability stems from improper path handling in authentication checks. Key indicators:

1. The security advisory shows authentication bypass via path manipulation with semicolons and dots
2. BasicAuthAccessControlFactory is Pinot's known authentication component
3. createUser endpoint is the protected resource being accessed
4. The path parsing discrepancy between security filters (using raw URI) and request routing (using parsed path) would explain the bypass

While exact code changes aren't available, the combination of:

• Security checks relying on request URI parsing
• User management endpoints being protected resources
• Path parameter handling differences between web server and application strongly suggests the authentication check in BasicAuthAccessControl and the subsequent controller method would appear in runtime traces during exploitation.