title: Apache IoTDB: Remote Code Execution (RCE) risk via the UDF
description: Remote Code Execution vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 through 1.2.2.
Users are recommended to upgrade to version 1.3.0, which fixes the issue.
problem types: Remote code execution
affected:
{
defaultStatus: unaffected
product: Apache IoTDB
vendor: Apache Software Foundation
versions:
lessThanOrEqual: 1.2.2, status: affected, version: 1.0.0, versionType: semver
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]