No authorization of DatabaseConnectController in grafana-connector.
CVE-2022-38370
7.5HIGH
What is CVE-2022-38370?
Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.
Affected Version(s)
Apache IoTDB 0.13.0