~ / search / GHSA-g6vm-3ch8-c6jq

GHSA-g6vm-3ch8-c6jq

Apache IoTDB Session Fixation vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-38369

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.iotdb:iotdb-server < 0.13.1 0.13.1
PyPI apache-iotdb < 0.13.1 0.13.1

Details

As written in the advisory (Markdown source, shown as plain text).

Apache IoTDB version 0.13.0 is vulnerable to session id attack. Users should upgrade to version 0.13.1 which addresses this issue.

References

External links from the advisory. They lead to third-party sites.