CVE-2023-24829
CVE-2023-24829 · Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.
CVSS 8.8 · High · EPSS 1.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache iotdb workbench
- Versions
- ≥ 0.13.0, < 0.13.3: Affected (custom)
Update to 0.13.3
apache-iotdb PyPI
- Versions
- 0.13.0
- 0.13.0.post1
- 0.13.1
- 0.13.2
- Affected ranges
- ECOSYSTEM: ≥ 0.13.0, < 0.13.3
Update to 0.13.3