CVE-2023-51656
Assigner: apache
Published: 2023-12-21T11:47:57.912Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache IoTDB
vendor: Apache Software Foundation
versions: lessThanOrEqual: 0.13.4
status: affected
version: 0.13.0
versionType: semver
descriptions: supportingMedia: base64: no
type: text/html
value: Deserialization of Untrusted Data vulnerability in Apache IoTDB.<p>This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.</p><p>Users are recommended to upgrade to version 1.2.2, which fixes the issue.</p>
value: Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 through 0.13.4.

Users are recommended to upgrade to version 1.2.2, which fixes the issue.


metrics: other: content: text: low
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-502
description: CWE-502 Deserialization of Untrusted Data
type: CWE
source: discovery: UNKNOWN
title: Apache IoTDB: Unsafe deserialize map in Sync Tool
x_generator: engine: Vulnogram 0.1.0-dev