# PYSEC-2022-43070 - Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which…

Source: https://junglewise.ai/threats/pysec-2022-43070-apache-iotdb-grafana-connector-version-0-13-0-contains-0d4e551d  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2022-09-05  
License: CC BY 4.0 with a link back

Severity: low · CVSS 3.1 · Published 2022-09-05

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Technologies: [apache-iotdb (PyPI)](https://junglewise.ai/threats/technologies/apache-iotdb). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is This vulnerability exploited in the wild?** No. Junglewise Threat Intelligence has no report of This vulnerability being exploited in the wild.

**How severe is This vulnerability?** Low severity, with a CVSS score of 3.1, published 5 September 2022.

**Which products and versions are affected?** apache-iotdb (PyPI) ECOSYSTEM:introduced=0.

**Is there a fix for This vulnerability?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected?** Check whether you run apache-iotdb (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- apache-iotdb (PyPI) ECOSYSTEM:introduced=0

## Related threats

- [Apache IoTDB path traversal in DataNode RPC interface](https://junglewise.ai/threats/cve-2026-24014-apache-iotdb-path-traversal-in-datanode-rpc-interface)
- [Apache IoTDB authentication bypass in Thrift RPC query handlers](https://junglewise.ai/threats/cve-2026-24013-apache-iotdb-authentication-bypass-in-thrift-rpc-query-handlers)
- [Apache IoTDB uncontrolled resource consumption in query interface](https://junglewise.ai/threats/cve-2026-24012-apache-iotdb-uncontrolled-resource-consumption-in-query-interface)
- [Apache IoTDB insecure deserialization in external input processing](https://junglewise.ai/threats/cve-2025-48459-apache-iotdb-insecure-deserialization-in-external-input)
- [Apache IoTDB Discloses Sensitive Information via Log Files](https://junglewise.ai/threats/cve-2025-26864-apache-iotdb-discloses-sensitive-information-via-log-files)