What is GHSA-pvjv-386f-c8wh?

GHSA-pvjv-386f-c8wh is a security advisory published by GitHub Security Advisories with Critical severity. Apache IoTDB Grafana Connector vulnerable to Improper Authentication

Which CVE IDs does GHSA-pvjv-386f-c8wh cover?

GHSA-pvjv-386f-c8wh covers the following CVE IDs: CVE-2023-24831. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pvjv-386f-c8wh?

GHSA-pvjv-386f-c8wh has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-pvjv-386f-c8wh?

GHSA-pvjv-386f-c8wh affects 2 products, including: maven/org.apache.iotdb:iotdb-grafana-connector:\u003e= 0.13.0, \u003c 0.13.4; pip/apache-iotdb:\u003e= 0.13.0, \u003c 0.13.5.

GHSA-pvjv-386f-c8whCriticalCVSS 9.8

Apache IoTDB Grafana Connector vulnerable to Improper Authentication

Vendor

GitHub Security Advisories

Published

April 17, 2023

Last Modified

September 12, 2024

🔗 CVE IDs covered (1)

CVE-2023-24831 →

📋 Description

Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB. This issue affects Apache IoTDB Grafana Connector from 0.13.0 through 0.13.3.

Attackers could log in without authorization. This is fixed in 0.13.4.

🎯 Affected products2

maven/org.apache.iotdb:iotdb-grafana-connector:>= 0.13.0, < 0.13.4
pip/apache-iotdb:>= 0.13.0, < 0.13.5

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-24831
https://lists.apache.org/thread/3dgvzgstycf8b5hyf4z3n7cqdhcyln3l
https://github.com/pypa/advisory-database/tree/main/vulns/apache-iotdb/PYSEC-2023-7.yaml
https://github.com/advisories/GHSA-pvjv-386f-c8wh