CVE-2023-24831
CVE-2023-24831 · Apache IoTDB grafana-connector Login Bypass Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.
CVSS 9.8 · Critical · EPSS 1.2% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache iotdb
- Versions
- ≥ 0.13.0, ≤ 0.13.3: Affected (semver)
No fix published
org.apache.iotdb:iotdb-grafana-connector Maven
- Versions
- 0.13.0
- 0.13.1
- 0.13.2
- 0.13.3
- Affected ranges
- ECOSYSTEM: ≥ 0.13.0, < 0.13.4
Update to 0.13.4
apache-iotdb PyPI
- Versions
- 0.13.0
- 0.13.0.post1
- 0.13.1
- 0.13.2
- 0.13.3
- Affected ranges
- ECOSYSTEM: ≥ 0.13.0, < 0.13.5
Update to 0.13.5