Volerion logoVolerion
Volerion logoVolerion

Apache IoTDB Remote Code Execution Vulnerability via Untrusted UDF URI

Vulnerability

A remote code execution vulnerability has been identified in Apache IoTDB versions 1.0.0 prior to 1.3.4. This issue arises from the ability of an attacker with privileges to create user-defined functions (UDFs) to register malicious functions from untrusted URIs.

Impact

Exploitation of this vulnerability allows for remote code execution on the server where Apache IoTDB is running.

Remediation

Users are advised to upgrade to Apache IoTDB version 1.3.4 or later, which addresses this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.4
impact
10.0
exploitability
4.9
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.