CVE-2022-38370

HIGH · CVSS 7.5 EPSS 1.15%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-09-05 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-38370

Severity

HIGH

CVSS

7.5

EPSS

1.15%

Apache

Original NVD Description

Apache IoTDB grafana-connector version 0.13.0 contains an interface without authorization, which may expose the internal structure of database. Users should upgrade to version 0.13.1 which addresses this issue.