Not rated

CVE-2023-49109 Exposure of Remote Code Execution in Apache Dolphinscheduler

Description

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

Affected products and versions

Product	Affected versions	Fixed in
Apache DolphinScheduler 3.0	3.0.0 → < 3.2.1	3.2.1
dolphinscheduler 3.0	3.0.0 → < 3.2.1	3.2.1

The 46 CVEs of Apache DolphinScheduler →

CVE-2026-71896 An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account… Not rated CVE-2026-71895 An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes… Not rated CVE-2026-71183 An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data… Not rated CVE-2026-66087 An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance… Not rated

Do you use Apache DolphinScheduler?

Track this CVE Watch Apache DolphinScheduler Check my SBOMs

www.cveye.io/en/cve/CVE-2023-49109

Timeline

Published February 20, 2024
Last modified February 13, 2025

References

github.com github.com
lists.apache.org lists.apache.org
lists.apache.org lists.apache.org
www.openwall.com www.openwall.com

Track this CVE

CVE-2023-49109 Exposure of Remote Code Execution in Apache Dolphinscheduler

Description

Affected products and versions

Other CVEs of Apache DolphinScheduler