GHSA-vx84-xvr8-w24c

ghsaUSosv

Apache IoTDB: DoS Vulnerability

view advisory published 2025-09-24Licence: CC-BY-4.0

A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, which fixes the issue.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-48392US	high7.5	0.60% (48th)	—	2025-09-24
A vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.3.3 through 1.3.4, from 2.0.1-beta through 2.0.4. Users are recommended to upgrade to version 2.0.5, whic…

references

External citations — patches, advisories, analysis.

http://www.openwall.com/lists/oss-security/2025/09/24/9WEB
https://github.com/apache/iotdbPACKAGE
https://lists.apache.org/thread/1rn0637hptglmctf8cqd9425bj4q21tdWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-48392ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan