CVE-2023-24829

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.

Score

CVSS 3.1 8.8 High

Status

Modified - security@apache.org

Published

2023-01-31

Last modified

2025-03-27

Weaknesses

CWE-863

Affected products

• Iotdb (Apache)
• Apache Iotdb Workbench (Apache Software Foundation)

References

• https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo