CVE-2022-38369
Fixed upstream EPSS 1%
Apache IoTDB version 0.13.0 is vulnerable by session id attack. Users should upgrade to version 0.13.1 which addresses this issue.
Products: Apache Software Foundation Apache IoTDB
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.apache.iotdb:iotdb-server | 0.13.1 |
| PyPI | apache-iotdb | 0.13.1 |