Withdrawn Advisory: Apache IoTDB contains Improper Authentication

HIGH 7.5CVE-2023-24830 · GHSA-pp4w-9x82-6r47 · PYSEC-2023-6 · Published 30/01/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
org.apache.iotdb:iotdb-parent Maven	`≥ 0.13.0, < 0.13.3`	`0.13.3`
apache-iotdb PyPI	`≥ 0.13.0, < 0.13.3`	`0.13.3`
iotdb apache	`≥ 0.13.0, < 0.13.3`	`0.13.3`

Description

Withdrawn Advisory

This advisory has been withdrawn because the affected component, org.apache.iotdb.admin:iotdb-web-workbench, is not in a supported ecosystem. This link is maintained to preserve external references.

Original Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.

NVD description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.

References

nvd.nist.gov/vuln/detail/CVE-2023-24830 · ADVISORY
apache/iotdb · PACKAGE
lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free