Skip to content
OpenAdvisories
High · 7.5 CVE-2025-48392 EUVD-2025-30950GHSA-vx84-xvr8-w24c

Apache IoTDB: DoS Vulnerability

Published Sep 24, 2025 · Updated Nov 4, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache IoTDB Package: org.apache.iotdb:iotdb-core Ecosystem: Maven

Description

A vulnerability in Apache IoTDB.

This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4.

Users are recommended to upgrade to version 2.0.5, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache IoTDB 1.3.3 – ≤ 1.3.4, 2.0.1-beta – ≤ 2.0.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.iotdb:iotdb-core >= 1.3.3, < 2.0.5 2.0.5 GHSA-vx84-xvr8-w24c

References