Unrated severityNVD Advisory· Published Apr 17, 2023· Updated Feb 13, 2025

Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench

CVE-2023-30771

Description

Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/IoTDB Workbenchllm-fuzzy2 versions
<=0.13.3+ 1 more
- (no CPE)range: <=0.13.3
- (no CPE)range: 0.13.3

Patches

Vulnerability mechanics

References

lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojbmitrevendor-advisory
www.openwall.com/lists/oss-security/2023/04/18/7mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000