{"action":"Upgrade apache-iotdb to 0.13.3 or later.","affected":[{"fixed":"0.13.3","introduced":"0.13.0"}],"component":"apache-iotdb","cve_ids":["CVE-2023-24830"],"ecosystem":"PyPI","epss":0.01331,"exploited":false,"fixed_versions":["0.13.3"],"id":"tcs_01M5KGKMW33JH5N1QFQXN96W0Z","modified_at":"2023-11-08T04:11:49.064202Z","published_at":"2023-01-30T17:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-6","https://lists.apache.org/thread/l4fon37687jz5ohgsnz2ko9fv400915t"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-6","url":"https://osv.dev/vulnerability/PYSEC-2023-6"}],"summary":"Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB: from 0.13.0 before 0.13.3."}