High · 7.5 CVE-2023-24830 EUVD-2023-0039GHSA-pp4w-9x82-6r47PYSEC-2023-6

Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization

Published Jan 30, 2023 · Updated Mar 28, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB Workbench Package: apache-iotdb Ecosystem: PyPI

Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache IoTDB Workbench	0.13.0 – < 0.13.3	0.13.3

Affected packages

Ecosystem	Package	Affected	Fixed	Record
PyPI	apache-iotdb	>= 0.13.0, < 0.13.3	0.13.3	PYSEC-2023-6

References

https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t vendor-advisory