org.apache.iotdb/iotdb-grafana-connector vulnerabilities

Latest org.apache.iotdb/iotdb-grafana-connector CVEs

Newest publication first

1. CVE-2023-24831 Apache IoTDB grafana-connector Login Bypass Vulnerability

   Published 2023-04-17

   Critical·CVSS 9.8 EPSS 1.2%

   Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3. Attackers could login without authorization. This is fixed in 0.13.4.

2. CVE-2022-38370 No authorization of DatabaseConnectController in grafana-connector.

   Published 2022-09-05

   High·CVSS 7.5 EPSS 1.4%

   Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.