Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-51656 EUVD-2023-3191GHSA-f23h-52hj-99p6

Apache IoTDB: Unsafe deserialize map in Sync Tool

Published Dec 21, 2023 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB Package: org.apache.iotdb:iotdb-parent Ecosystem: Maven

Description

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.

Users are recommended to upgrade to version 1.2.2, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache IoTDB 0.13.0 – ≤ 0.13.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.iotdb:iotdb-parent >= 0.13.0, < 1.2.2 1.2.2 GHSA-f23h-52hj-99p6

References