Not rated
CVE-2023-49109 Exposure of Remote Code Execution in Apache Dolphinscheduler
Description
Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache DolphinScheduler 3.0 | 3.0.0 → < 3.2.1 | 3.2.1 |
| dolphinscheduler 3.0 | 3.0.0 → < 3.2.1 | 3.2.1 |
References
- github.com github.com
- lists.apache.org lists.apache.org
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Apache DolphinScheduler
The 46 CVEs of Apache DolphinScheduler →
CVE-2026-71896
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account…
Not rated
CVE-2026-71895
An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes…
Not rated
CVE-2026-71183
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data…
Not rated
CVE-2026-66087
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance…
Not rated