PT-2026-57104 · Apache · Apache Iotdb
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
Apache IoTDB versions 1.0.0 through 2.0.9
Description
An improper limitation of a pathname to a restricted directory, known as Path Traversal, exists in Apache IoTDB. This allows an attacker to write arbitrary files to any location where the IoTDB process has write permissions by utilizing an unsafe API.
Recommendations
Upgrade to version 2.0.10.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Iotdb