CVE-2023-51656

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Dec 21, 2023

Updated: Jan 2, 2024

CWE ID 502

Summary

CVE-2023-51656 is a Deserialization of Untrusted Data vulnerability discovered in Apache IoTDB. Affected versions of the software include those from 0.13.0 through 0.13.4. This issue poses a risk due to the deserialization of untrusted data, which could lead to arbitrary code execution. To mitigate this vulnerability, users are advised to upgrade Apache IoTDB to the latest version, 1.2.2, which includes the necessary fix.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Apache IoTDB

Affected Vendors

Apache Software Foundation

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/t4NLUB
https://www.cve.org/CVERecord?id=CVE-2023-51656
https://nvd.nist.gov/vuln/detail/CVE-2023-51656

Back to Vulnerability Database