CVE-2023-30771

CRITICAL

Apache IoTDB Web Workbench 0.13.3 - Incorrect Authorization

Title source: llm
STIX 2.1

Description

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.

References (2)

Core 2

Scores

CVSS v3 9.8
EPSS 0.0032
EPSS Percentile 54.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-863
Status published
Products (1)
apache/iotdb_web_workbench 0.13.3
Published Apr 17, 2023
Tracked Since Feb 18, 2026