CVE-2022-38370

UNRATED

Description

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Affected products

Apache Software Foundation / Apache IoTDB0.13.0 – 0.13.0

References

MAILING_LISThttps://lists.apache.org/thread/kcpqgstvgf8sxy9ktxm1836nlwc8xy3j
MAILING_LISThttp://www.openwall.com/lists/oss-security/2022/09/05/2

Updated 29m ago · 8 sources