Lucene search
HistoryJan 15, 2024 - 11:15 a.m.
CVE-2023-46226
apache
iotdb
remote code execution
cve-2023-46226
upgrade
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Users are recommended to upgrade to version 1.3.0, which fixes the issue.
Affected configurations
Node
apacheiotdbRange1.0.0–1.3.0
Related
veracode
veracode
Remote Code Execution
2024-01-16 06:14:36
cve
cve
CVE-2023-46226
2024-01-15 11:15:07
prion
prion
Remote code execution
2024-01-15 11:15:00
osv
osv
PYSEC-2024-11
2024-01-15 11:15:00
Remote Code Execution vulnerability in Apache IoTDB via UDF
2024-01-15 12:30:19
cvelist
cvelist
CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF
2024-01-15 10:35:49
github
github
Remote Code Execution vulnerability in Apache IoTDB via UDF
2024-01-15 12:30:19
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.004
Percentile
72.3%
Related for NVD:CVE-2023-46226