CVE-2022-38370: Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should…

PriorityP342high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.15%

63.2th percentile

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	iotdb	—	—
apache_software_foundation	apache_iotdb	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.