~ / search / GHSA-gp98-hfvm-2r4x

GHSA-gp98-hfvm-2r4x

Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-26795

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.iotdb:iotdb-jdbc >= 0.10.0, < 1.3.4 1.3.4
Maven org.apache.iotdb:iotdb-jdbc >= 2.0.1-beta, < 2.0.2 2.0.2

Details

As written in the advisory (Markdown source, shown as plain text).

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in Apache IoTDB JDBC driver. This issue affects iotdb-jdbc: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2. Users are recommended to upgrade to version 2.0.2 and 1.3.4, which fix the issue.

References

External links from the advisory. They lead to third-party sites.