Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-38370

No authorization of DatabaseConnectController in grafana-connector.

Description

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache IoTDB

  • 0.13.0affected

References