p PatchFirst

CVE-2023-24830

CVE-2023-24830 · Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.

CVSS 7.5 · High · EPSS 1.3% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • apache iotdb workbench

    Versions
    • ≥ 0.13.0, < 0.13.3: Affected (semver)

    Update to 0.13.3

  • apache-iotdb PyPI

    Versions
    • 0.13.0
    • 0.13.0.post1
    • 0.13.1
    • 0.13.2
    Affected ranges
    • ECOSYSTEM: ≥ 0.13.0, < 0.13.3

    Update to 0.13.3

Original sources

Check your server →