CVE-2022-38370

No authorization of DatabaseConnectController in grafana-connector.

published September 5, 2022

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01349 · 71.3th percentile
Published
2022-09-05T13:50Z
EPSS history
Timeline
  • 05 SEP 13:50Z
    No authorization of DatabaseConnectController in grafana-connector.
    cvelistv5