Vulnerability GHSA-g6vm-3ch8-c6jq
High Risk
HIGH RISK
CVSS Score: 8.8
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
4 years ago
September 06, 2022 at 12:00 AM UTC
Apache IoTDB Session Fixation vulnerability
0.9.0 - 0.13.0.post1
0.9.0 - 0.13.0.post1
Summary
Apache IoTDB Session Fixation vulnerability
Details
Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2079
1.3.3 - 2.0.6 PYSEC-2026-2079
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2080
1.3.3 - 2.0.6 PYSEC-2026-2080
Critical
4 months ago
No summary available
1.3.3 - 2.0.6 PYSEC-2026-2081
1.3.3 - 2.0.6 PYSEC-2026-2081
Critical
4 months ago
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
Critical
4 months ago
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5 GHSA-xrvj-h9w2-3q69
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5 GHSA-xrvj-h9w2-3q69
Impacted packages
Timeline
Published
4 years ago
September 06, 2022 at 12:00 AM UTC
Fixed (0.13.1)
4 years ago
August 09, 2022 at 09:09 AM UTC
Fixed (0.13.1)
Unknown
Unknown
Last Modified
1 year ago
November 26, 2024 at 04:05 PM UTC