Improper input validation in Apache Software Foundation Iotdb
CVE-2026-24713
Improper Input Validation vulnerability in Apache IoTDB. This issue affects Apache IoTDB: from 1.0.0 before 1.3.7, from 2.0.0 before 2.0.7. Users are recommended to upgrade to version 1.3.7 or 2.0.7, which fixes the issue.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.000 (12.5th percentile) — read the EPSS interpretation.
Affected products
- Apache Software Foundation Iotdb — versions 1.0.0, 2.0.0
Weakness classification (CWE)
References
- lists.apache.org/thread/vopgv6y2ccw403b0zv7rvojjrh7x1j5p (vendor-advisory)