p PatchFirst

PatchFirst · Latest vulnerabilities

org.apache.iotdb:iotdb-core vulnerabilities

Vulnerabilities published for org.apache.iotdb:iotdb-core in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2024-24780

    Critical · CVSS 9.8EPSS 1.44%Fix available

    Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function

    Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI. This issue affects Apache IoTDB: from 1.0.0 before 1.3.4. Users are recommended to upgrade to version 1.3.4, which fixes the issue.

    org.apache.iotdb:iotdb-core
    • Update to 1.3.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →