CVE-2023-30771
Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
Résumé
Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.
This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com