Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-30771 EUVD-2023-0041GHSA-787r-6wxc-cg5fPYSEC-2023-8

Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

Published Apr 17, 2023 · Updated Feb 13, 2025 · Assigned by apache

Description

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache IoTDB Workbench 0.13.3 – < 0.13.4 0.13.4

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-iotdb all versions — PYSEC-2023-8

References