High · 7.3 CVE-2024-36448 EUVD-2024-36093GHSA-5hj8-xgx5-p37f

Apache IoTDB Workbench: SSRF Vulnerability (EOL)

Published Aug 5, 2024 · Updated Mar 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB Workbench

Description

** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench.

This issue affects Apache IoTDB Workbench: from 0.13.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache IoTDB Workbench	0.13.0	—

References

https://lists.apache.org/thread/d19p0vsm7nogp43q9m3tzm5jl6mzjj1x vendor-advisory