Vulnerability GHSA-xrvj-h9w2-3q69
Critical
CRITICAL RISK
CVSS Score: 9.1
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
4 months ago
June 26, 2026 at 03:32 PM UTC
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.5
Summary
Apache IoTDB has a Path Traversal vulnerability
Details
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache IoTDB.
This issue affects Apache IoTDB: from 2.0.0 before 2.0.6, from 1.0.0 before 1.3.6.
Users are recommended to upgrade to version 1.3.6 and 2.0.6, which fixes the issue.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
4 months ago
Apache IoTDB has a Path Traversal vulnerability
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
1.0.0 - 1.3.5 and 2.0.1-beta - 2.0.6 GHSA-h548-jhj8-q85h
High Risk
4 years ago
Apache IoTDB subject to ReDOS with Java 8
0.12.2 - 0.13.2 GHSA-g6hg-4v3c-6jq7
0.12.2 - 0.13.2 GHSA-g6hg-4v3c-6jq7
High Risk
4 years ago
Apache IoTDB Session Fixation vulnerability
0.8.0 - 0.13.0 GHSA-g6vm-3ch8-c6jq
0.8.0 - 0.13.0 GHSA-g6vm-3ch8-c6jq
Impacted packages
Timeline
Published
4 months ago
June 26, 2026 at 03:32 PM UTC
Fixed (2.0.6)
Unknown
Unknown
Fixed (1.3.6)
Unknown
Unknown
Last Modified
12 hours ago
November 03, 2026 at 10:15 PM UTC