Remote Code Execution vulnerability in Apache IoTDB via UDF

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-46226 · ADVISORY
• apache/iotdb · PACKAGE
• pypa/advisory-database · WEB
• lists.apache.org/thread/293b4ob65ftnfwyf62fb9zh8gwdy38hg · WEB
• openwall.com/lists/oss-security/2024/01/15/1 · WEB
• GitHub Advisory GHSA-rxgg-273w-rfw7 · ADVISORY

Lỗ hổng khác của org.apache.iotdb:iotdb-core

• CVE-2026-24713NGHIÊM TRỌNG 9.8Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7.…
• CVE-2026-24015NGHIÊM TRỌNG 9.8A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended …
• CVE-2025-48392CAO 7.5A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recom…
• CVE-2024-24780NGHIÊM TRỌNG 9.8Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register mal…