What is CVE-2023-38502?

CVE-2023-38502 is a medium-severity vulnerability in Taosdata Tdengine, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2023-07-25.

How severe is CVE-2023-38502?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Improper input validation in Taosdata Tdengine

CVE-2023-38502

TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to version 3.0.7.1, TDengine DataBase crashes on UDF nested query. This issue affects TDengine Databases which let users connect and run arbit…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.006 (42.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Taosdata Tdengine — versions < 3.0.7.1
Tdengine

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2023-38502?: CVE-2023-38502 is a medium-severity vulnerability in Taosdata Tdengine, classified under Improper Input Validation. CVSS score: 6.5/10. Published 2023-07-25.
How severe is CVE-2023-38502?: Medium severity. CVSS v3 base score is 6.5 out of 10.