CVE-2022-38370

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Score

CVSS 3.1 7.5 High

Status

Modified - security@apache.org

Published

2022-09-05

Last modified

2024-08-03

Weaknesses

CWE-862

Affected products

• Iotdb (Apache)
• Apache Iotdb (Apache Software Foundation)

References

• http://www.openwall.com/lists/oss-security/2022/09/05/2
• https://lists.apache.org/thread/kcpqgstvgf8sxy9ktxm1836nlwc8xy3j