GHSA-rxgg-273w-rfw7

GitHub Security Advisory

Remote Code Execution vulnerability in Apache IoTDB via UDF

✓ GitHub Reviewed HIGH Has CVE

Remote Code Execution vulnerability in Apache IoTDB. This issue affects Apache IoTDB from 1.0.0 through 1.2.2.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

Maven org.apache.iotdb:iotdb-core

Affected versions: 1.0.0 (fixed in 1.3.0)

PyPI apache-iotdb

Affected versions: 1.0.0 (fixed in 1.3.0)

CVE-2023-46226

GHSA ID

GHSA-rxgg-273w-rfw7

Published

January 15, 2024 12:30 PM

Last Modified

June 20, 2025 10:17 PM

CVSS Score

7.5 /10

Primary Ecosystem

Maven

Primary Package

org.apache.iotdb:iotdb-core

GitHub Reviewed

✓ Yes

Last updated: July 27, 2025 6:35 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.