{"action":"Upgrade apache-iotdb to 0.13.3 or later.","affected":[{"fixed":"0.13.3","introduced":"0.13.0"}],"component":"apache-iotdb","cve_ids":["CVE-2023-24829"],"ecosystem":"PyPI","epss":0.01245,"exploited":false,"fixed_versions":["0.13.3"],"id":"tcs_01M5KGKJZHHM62R8X0KA86BHN1","modified_at":"2023-11-08T04:11:49.003062Z","published_at":"2023-01-31T10:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-5","https://lists.apache.org/thread/l0b59hh046tyn4gqot0bdrpg8gxlksmo"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-5","url":"https://osv.dev/vulnerability/PYSEC-2023-5"}],"summary":"Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional comp"}