Package · Maven

org.apache.iotdb:iotdb-parent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2023-51656

Apache IoTDB: Unsafe deserialize map in Sync Tool

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4. Users are recommended to upgrade to version 1.2.2, which fixes the issue.

Apache Software Foundation Apache IoTDB org.apache.iotdb:iotdb-parent Maven

Dec 21, 2023
Critical 9.8

CVE-2020-1952

Improper Certificate Validation in Apache IoTDB

An issue was found in Apache IoTDB .9.0 to 0.9.1 and 0.8.0 to 0.8.2. When starting IoTDB, the JMX port 31999 is exposed with no certification.Then, clients could execute code remotely.

Apache IoTDB org.apache.iotdb:iotdb-parent Maven

Apr 27, 2020