oss-sec mailing list archives

CVE-2023-24830: Apache IoTDB: apache/iotdb-web-workbench: create a user without authorization

From: Jialin Qiao <qiaojialin () apache org>
Date: Mon, 30 Jan 2023 15:49:25 +0000

Severity: low

Description:

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 
0.13.0 before 0.13.3.

References:

https://iotdb.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-24830

Current thread:

CVE-2023-24830: Apache IoTDB: apache/iotdb-web-workbench: create a user without authorization Jialin Qiao (Jan 30)