Apache IoTDB Grafana Connector vulnerable to Improper Authentication

CRITICAL 9.8CVE-2023-24831 · GHSA-pvjv-386f-c8wh · PYSEC-2023-7 · Published 17/04/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
org.apache.iotdb:iotdb-grafana-connector Maven	`≥ 0.13.0, < 0.13.4`	`0.13.4`
apache-iotdb PyPI	`≥ 0.13.0, < 0.13.5`	`0.13.5`
iotdb apache	`≥ 0.13.0, ≤ 0.13.3`	No fix yet

Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB. This issue affects Apache IoTDB Grafana Connector from 0.13.0 through 0.13.3.

Attackers could log in without authorization. This is fixed in 0.13.4.

NVD description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

References

nvd.nist.gov/vuln/detail/CVE-2023-24831 · ADVISORY
apache/iotdb · PACKAGE
pypa/advisory-database · WEB
lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l · WEB
GitHub Advisory GHSA-pvjv-386f-c8wh · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free