VYPR
← All advisories
High severity7.3NVD Advisory· Published Aug 5, 2024· Updated Jun 17, 2026

CVE-2024-36448

CVE-2024-36448

Description

UNSUPPORTED WHEN ASSIGNED Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench.

This issue affects Apache IoTDB Workbench: from 0.13.0.

As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.

NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

3
  • Apache/Iotdb Workbenchllm-create3 versions
    >=0.13.0+ 2 more
    • (no CPE)range: >=0.13.0
    • (no CPE)range: 0.13.0
    • cpe:2.3:a:apache:iotdb_workbench:*:*:*:*:*:*:*:*range: >=0.13.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.