id: PYSEC-2023-8
details: |+
  Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database.

  This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.

affected:
- package:
    name: apache-iotdb
    ecosystem: PyPI
    purl: pkg:pypi/apache-iotdb
  ranges:
  - type: ECOSYSTEM
    events:
    - introduced: "0"
  versions:
  - 0.10.0
  - 0.10.1
  - 0.11.0
  - 0.11.1
  - 0.11.2
  - 0.11.3
  - 0.11.4
  - 0.12.0
  - 0.12.1
  - 0.12.2
  - 0.12.3
  - 0.12.4
  - 0.12.5
  - 0.12.6
  - 0.13.0
  - 0.13.0.post1
  - 0.13.1
  - 0.13.2
  - 0.13.3
  - 0.13.5
  - 0.13.5.1
  - 0.14.0rc1
  - 0.9.0
  - 0.9.2
  - 0.9.3
  - 1.0.0
  - 1.0.1
  - 1.1.0
references:
- type: ARTICLE
  url: https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb
- type: ADVISORY
  url: https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb
- type: ARTICLE
  url: http://www.openwall.com/lists/oss-security/2023/04/18/7
aliases:
- CVE-2023-30771
modified: "2023-05-04T03:49:44.939309Z"
published: "2023-04-17T08:15:00Z"