CVE-2025-48392CWE-400denial-of-service
CVE-2025-48392
High · published September 24, 2025
What it is
A vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4.
Users are recommended to upgrade to version 2.0.5, which fixes the issue.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00598 · 47.9th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2025-09-24T12:15Z
Affected products (2)
| Product | Versions | Fixed in |
|---|
| apache/iotdb | ≥ 1.3.3, ≤ 1.3.4 | — |
| apache/iotdb | ≥ 2.0.1, < 2.0.5 | 2.0.5 |
References (2)
EPSS history
Timeline