CVE-2023-46226
CVE-2023-46226 · Apache IoTDB: Remote Code Execution (RCE) risk via the UDF
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2. Users are recommended to upgrade to version 1.3.0, which fixes the issue.
CVSS 9.8 · Critical · EPSS 1.9% · Fix available
- Published
- Updated
Stack: python
Affected products and versions
apache iotdb
- Versions
- ≥ 1.0.0, ≤ 1.2.2: Affected (semver)
No fix published
org.apache.iotdb:iotdb-core Maven
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.3.0
Update to 1.3.0
apache-iotdb PyPI
- Versions
- 1.0.0
- 1.0.1
- 1.1.0
- 1.1.2
- 1.2.0
- 1.2.1
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.3.0
Update to 1.3.0