PyPI/apache-iotdb CVE-2022-38369: high 8.8, EPSS 1.30%

Apache IoTDB Session Fixation vulnerability

Action: Upgrade apache-iotdb to 0.13.1 or later.

pip install apache-iotdb==0.13.1

Affected

Fixed versions

Sources

• osv: GHSA-g6vm-3ch8-c6jq
• https://nvd.nist.gov/vuln/detail/CVE-2022-38369
• https://github.com/apache/iotdb
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-iotdb/PYSEC-2022-43069.yaml
• https://lists.apache.org/thread/7nk03ywvx3t3yjbcxzt7zy4nyc89y9b0
• http://www.openwall.com/lists/oss-security/2022/09/05/1

CVE-2022-38369 · published 2022-09-06T00:00:27Z · modified 2024-11-26T16:05:26.390743Z · JSON