iotdbPYSEC-2023-5
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 o
UnratedCVE-2023-24829 · Published Jan 31, 2023 · updated Nov 8, 2023
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| apache-iotdb PyPI | >= 0.13.0, < 0.13.3 | 0.13.3 |
Details and references
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.
- Severity from
- no source yet
- Also known as
- CVE-2023-24829
More iotdb advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Jan 302023 | Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3. CVE-2023-24830Unratedfixed in 0.13.3 | Unrated | 0.13.3 |
| Apr 172023 | Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. CVE-2023-30771Unratedno fix yet | Unrated | No fix yet |
| Apr 172023 | Apache IoTDB Grafana Connector vulnerable to Improper Authentication CVE-2023-24831Critical9.8fixed in 0.13.5 | Critical9.8 | 0.13.5 |
| Oct 262022 | Apache IoTDB subject to ReDOS with Java 8 CVE-2022-43766High7.5fixed in 0.13.3 | High7.5 | 0.13.3 |
| Sep 62022 | Apache IoTDB Session Fixation vulnerability CVE-2022-38369Medium8.8fixed in 0.13.1 | Medium8.8 | 0.13.1 |
| Jan 152024 | Remote Code Execution vulnerability in Apache IoTDB via UDF CVE-2023-46226High9.8fixed in 1.3.0 | High9.8 | 1.3.0 |