CVE-2023-51656 Apache IoTDB: Unsafe deserialize map in Sync Tool

2023-12-2111:47:57

CWE-502

apache

www.cve.org

cve-2023-51656

apache iotdb

untrusted data

upgrade

version 1.2.2

9.7 High

AI Score

Confidence

High

0.037 Low

EPSS

Percentile

91.8%

JSON

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.

Users are recommended to upgrade to version 1.2.2, which fixes the issue.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache IoTDB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "0.13.4",
        "status": "affected",
        "version": "0.13.0",
        "versionType": "semver"
      }
    ]
  }
]