Remote Code Execution (RCE)

org.apache.iotdb, iotdb-core is vulnerable to Remote Code Execution RCE. The vulnerability is due to untrusted URI of UDF, allowing attackers with UDF creation privileges to register malicious functions from external sources...