apache-iotdb vulnerabilities (PyPI)
13 vulnerabilities.
-
apache-iotdbPyPI Apache IoTDB: Authentication Bypass via Forged SessionID in Thrift RPC 9.1 Critical -
apache-iotdbPyPI Apache IoTDB: Denial of Service via Resource Exhaustion in Aggregation Query 7.5 High -
apache-iotdbPyPI Apache IoTDB: Path Traversal in DataNode Internal RPC Trigger JAR Upload Allows Arbitrary File Write 9.8 Critical -
apache-iotdbPyPI Apache IoTDB: Deserialization of untrusted Data 5.3 Medium -
apache-iotdbPyPI Apache IoTDB: Exposure of Sensitive Information in IoTDB OpenID Authentication 7.5 High -
apache-iotdbPyPI Apache IoTDB: Remote Code Execution with untrusted URI of User-defined function 9.8 Critical -
apache-iotdbPyPI Apache IoTDB: Remote Code Execution (RCE) risk via the UDF 9.8 Critical -
apache-iotdbPyPI Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench 9.8 Critical -
apache-iotdbPyPI Apache IoTDB grafana-connector Login Bypass Vulnerability 9.8 Critical -
apache-iotdbPyPI Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench 8.8 High -
apache-iotdbPyPI Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization 7.5 High -
apache-iotdbPyPI Apache IoTDB prior to 0.13.3 allows DoS 7.5 High -
apache-iotdbPyPI Login check vulnerability by session Id 8.8 High