CVE-2023-24829CWE-863

Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

High · published January 31, 2023

CVSS v3.1
8.8
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01245 · 69.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2023-01-31T09:22Z
EPSS history
Timeline
  • 31 JAN 09:22Z
    Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
    cvelistv5