Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-49068

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1. Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.

Published

2023-11-27T10:15:08.580

Last Modified

2024-11-21T08:32:45.430

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses

Type: Secondary
CWE-200
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	apache	dolphinscheduler	< 3.2.1	Yes

References

https://github.com/apache/dolphinscheduler/pull/15192 Issue Tracking, Patch ([email protected])
https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq Mailing List, Vendor Advisory ([email protected])
https://github.com/apache/dolphinscheduler/pull/15192 Issue Tracking, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq Mailing List, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)