PYSEC-2022-43070 - Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of databa

Severity: low · CVSS 3.1 · Published 2022-09-05

Technologies: apache-iotdb (PyPI). Vendors: PyPI.

Executive brief

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Affected products

PyPI apache-iotdb

Related threats

Apache IoTDB path traversal in DataNode RPC interface
Apache IoTDB authentication bypass in Thrift RPC query handlers
Apache IoTDB uncontrolled resource consumption in query interface
Apache IoTDB insecure deserialization in external input processing
PYSEC-2025-60 - Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuth