Approved changes feed: RSS · Atom

cpe:2.3:a:apache_software_foundation:apache_iotdb_workbench:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache Software Foundation (f563070d-e18f-561b-b86c-987936937e8a)
ProductApache Iotdb Workbench (0f1a01d3-502f-5229-8f6c-a2eb1d84eab0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-36448 vulnerable 2026-06-08 06:39:45.009711 Apache IoTDB Workbench: SSRF Vulnerability (EOL)
** UNSUPPORTED WHEN ASSIGNED ** Server-Side Request Forgery (SSRF) vulnerability in Apache IoTDB Workbench. This issue affects Apache IoTDB Workbench: from 0.13.0. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Published: 2024-08-05T09:53:38.194Z
Updated: 2025-03-13T14:22:04.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30771 vulnerable 2026-06-08 06:04:41.096326 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.4 of iotdb-web-workbench onwards.
Published: 2023-04-17T07:26:12.996Z
Updated: 2025-02-13T16:49:35.515Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24830 vulnerable 2026-06-08 05:56:06.293550 Apache IoTDB Workbench: apache/iotdb-web-workbench: create a user without authorization
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects iotdb-web-workbench component: from 0.13.0 before 0.13.3.
Published: 2023-01-30T16:25:33.163Z
Updated: 2025-03-28T14:24:59.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-24829 vulnerable 2026-06-08 05:56:06.292416 Apache IoTDB Workbench: apache/iotdb-web-workbench: forge the JWTToken to access workbench
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional component of IoTDB, providing a web console of the database. This problem is fixed from version 0.13.3 of iotdb-web-workbench onwards.
Published: 2023-01-31T09:22:41.587Z
Updated: 2025-03-27T17:13:42.494Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.