oss-sec mailing list archives
CVE-2023-24830: Apache IoTDB: apache/iotdb-web-workbench: create a user without authorization
From: Jialin Qiao <qiaojialin () apache org>
Date: Mon, 30 Jan 2023 15:49:25 +0000
Severity: low Description: Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3. References: https://iotdb.apache.org https://www.cve.org/CVERecord?id=CVE-2023-24830
Current thread:
- CVE-2023-24830: Apache IoTDB: apache/iotdb-web-workbench: create a user without authorization Jialin Qiao (Jan 30)