org.apache.iotdb:iotdb-distribution (>=0.13.0 <=0.13.3) potentially affected by CVE-2023-24831 via org.apache.iotdb:iotdb-grafana-connector (>=0.13.0 <=0.13.3)

org.apache.iotdb:iotdb-grafana-connector MAVEN version =0.13.0, =0.13.0, =0.13.3 Source cves: CVE-2023-24831 Source advisory: OSV:GHSA-PVJV-386F-C8WH...

GHSA-PVJV-386F-C8WH Apache IoTDB Grafana Connector vulnerable to Improper Authentication

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB. This issue affects Apache IoTDB Grafana Connector from 0.13.0 through 0.13.3. Attackers could log in without authorization. This is fixed in 0.13.4...

org.apache.iotdb:iotdb-distribution (=0.13.0) potentially affected by CVE-2022-38370 via org.apache.iotdb:iotdb-grafana-connector (=0.13.0)

org.apache.iotdb:iotdb-grafana-connector MAVEN version =0.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.iotdb:iotdb-grafana-connector and may be impacted: - org.apache.iotdb:iotdb-distribution =0.13.0 Source cves: CVE-2022-38370 Sourc...

GHSA-C86F-9GRV-PMQF Apache IoTDB grafana-connector contains an interface without authorization

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of a database. Users should upgrade to version 0.13.1, which addresses this issue...