Skip to content
Advisories.
iotdbPYSEC-2023-8

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

UnratedCVE-2023-30771 · Published Apr 17, 2023 · updated Oct 9, 2025

Source advisory

Affected versions

PackageAffectedFixed in
apache-iotdb
PyPI
all versionsNo fix yet
Details and references

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.

Severity from
no source yet
Also known as
CVE-2023-30771

More iotdb advisories

All
DateAdvisory
Apr 172023Apache IoTDB Grafana Connector vulnerable to Improper Authentication
CVE-2023-24831Critical9.8fixed in 0.13.5
Jan 312023Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 o
CVE-2023-24829Unratedfixed in 0.13.3
Jan 302023Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.
CVE-2023-24830Unratedfixed in 0.13.3
Oct 262022Apache IoTDB subject to ReDOS with Java 8
CVE-2022-43766High7.5fixed in 0.13.3
Sep 62022Apache IoTDB Session Fixation vulnerability
CVE-2022-38369Medium8.8fixed in 0.13.1
Jan 152024Remote Code Execution vulnerability in Apache IoTDB via UDF
CVE-2023-46226High9.8fixed in 1.3.0

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.