Maven/org.apache.iotdb:iotdb-parent CVE-2020-1952: critical 9.8, EPSS 2.68%
Improper Certificate Validation in Apache IoTDB
Action: Upgrade org.apache.iotdb:iotdb-parent to 0.9.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.2 | - |
Fixed versions
| 0.9.2 |
Sources
- osv: GHSA-wc6f-cjcp-cc33
- https://nvd.nist.gov/vuln/detail/CVE-2020-1952
- https://lists.apache.org/thread.html/r3d2ff899ead64d2952fdc1fbb1f520ca42011ed2b4c7f786e921f6b9%40%3Cdev.iotdb.apache.org%3E
CVE-2020-1952 · published · modified · JSON