Vulnerability GHSA-g6hg-4v3c-6jq7
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
October 26, 2022 at 07:00 PM UTC
Apache IoTDB subject to ReDOS with Java 8
0.12.2 - 0.13.2
0.12.2 - 0.13.2
Summary
Apache IoTDB subject to ReDOS with Java 8
Details
Apache IoTDB versions 0.12.2 through 0.12.6, and 0.13.0 through 0.13.2 are vulnerable to a Denial of Service attack when accepting untrusted patterns for REGEXP queries with Java 8. This issue is patched in 0.13.3. Users should upgrade or use a later version of Java to avoid it.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2079
1.3.3 - 2.0.6 PYSEC-2026-2079
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2080
1.3.3 - 2.0.6 PYSEC-2026-2080
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2081
1.3.3 - 2.0.6 PYSEC-2026-2081
Critical
4 months ago
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
Critical
4 months ago
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5 GHSA-xrvj-h9w2-3q69
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5 GHSA-xrvj-h9w2-3q69
Impacted packages
Timeline
Published
4 years ago
October 26, 2022 at 07:00 PM UTC
Fixed (0.13.3)
3 years ago
December 19, 2022 at 10:57 AM UTC
Fixed (0.13.3)
Unknown
Unknown
Fixed (0.13.3)
Unknown
Unknown
Fixed (0.13.3)
Unknown
Unknown
Last Modified
4 months ago
June 09, 2026 at 12:58 PM UTC