{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"apache-iotdb","cve_ids":["CVE-2023-30771"],"ecosystem":"PyPI","epss":0.01447,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKR7WA4BSMX7XZET158YH","modified_at":"2025-10-09T08:24:50.302336Z","published_at":"2023-04-17T08:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-8","https://lists.apache.org/thread/08nc3dr6lshfppx0pzmz5vbggdnzpojb","http://www.openwall.com/lists/oss-security/2023/04/18/7"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-8","url":"https://osv.dev/vulnerability/PYSEC-2023-8"}],"summary":"Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component on 0.13.3. iotdb-web-workbench is an optional component of IoTDB,"}