Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.iotdb/iotdb-server@0.13.0
purl pkg:maven/org.apache.iotdb/iotdb-server@0.13.0
Next non-vulnerable version 0.14.0-preview1
Latest non-vulnerable version 1.3.0
Risk
Vulnerabilities affecting this package (4)
Vulnerability Summary Fixed by
VCID-8yys-3rvw-nka6
Aliases:
CVE-2023-24831
GHSA-pvjv-386f-c8wh
PYSEC-2023-7
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.
0.13.4
Affected by 1 other vulnerability.
VCID-9j7x-4nqn-dbbx
Aliases:
CVE-2023-24830
GHSA-pp4w-9x82-6r47
PYSEC-2023-6
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3.
0.13.3
Affected by 1 other vulnerability.
VCID-nf8h-en1u-bua4
Aliases:
CVE-2023-51656
GHSA-f23h-52hj-99p6
Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue.
0.14.0-preview1
Affected by 0 other vulnerabilities.
VCID-x8ws-4e9s-hkcb
Aliases:
CVE-2023-24829
PYSEC-2023-5
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.
0.13.3
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.