Show filters
12 Total Results
Displaying 1-10 of 12
Sort by:
Attacker Value
Unknown
CVE-2023-46226
Disclosure Date: January 15, 2024 (last updated February 14, 2025)
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Users are recommended to upgrade to version 1.3.0, which fixes the issue.
1
Attacker Value
Unknown
CVE-2024-36448
Disclosure Date: August 05, 2024 (last updated August 31, 2024)
** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench.
This issue affects Apache IoTDB Workbench: from 0.13.0.
As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.
NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
0
Attacker Value
Unknown
CVE-2023-51656
Disclosure Date: December 21, 2023 (last updated February 14, 2025)
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.
Users are recommended to upgrade to version 1.2.2, which fixes the issue.
0
Attacker Value
Unknown
CVE-2023-30771
Disclosure Date: April 17, 2023 (last updated February 14, 2025)
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.
This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.
0
Attacker Value
Unknown
CVE-2023-24831
Disclosure Date: April 17, 2023 (last updated October 08, 2023)
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3.
Attackers could login without authorization. This is fixed in 0.13.4.
0
Attacker Value
Unknown
CVE-2023-24829
Disclosure Date: January 31, 2023 (last updated November 08, 2023)
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.
This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.
0
Attacker Value
Unknown
CVE-2023-24830
Disclosure Date: January 30, 2023 (last updated November 08, 2023)
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.
0
Attacker Value
Unknown
CVE-2022-43766
Disclosure Date: October 26, 2022 (last updated December 22, 2024)
Apache IoTDB version 0.12.2 to 0.12.6, 0.13.0 to 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. Users should upgrade to 0.13.3 which addresses this issue or use a later version of Java to avoid it.
0
Attacker Value
Unknown
CVE-2022-38370
Disclosure Date: September 05, 2022 (last updated October 08, 2023)
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.
0
Attacker Value
Unknown
CVE-2022-38369
Disclosure Date: September 05, 2022 (last updated October 08, 2023)
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
0
