Non notée
CVE-2023-49250 Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM)…
Description
Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM) attack on outgoing https connections could impersonate the server. This issue affects Apache DolphinScheduler: before 3.2.0. Users are recommended to upgrade to version 3.2.1, which fixes the issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache DolphinScheduler 3.2 | premières → 3.2.0 | Pas de correctif indiqué |
| dolphinscheduler | 3.2.0 | Pas de correctif indiqué |
| dolphinscheduler | 3.1.9 | Pas de correctif indiqué |
| dolphinscheduler | 3.0.6 | Pas de correctif indiqué |
| dolphinscheduler | 2.0.9 | Pas de correctif indiqué |
| dolphinscheduler | 1.3.9 | Pas de correctif indiqué |
| dolphinscheduler | 1.2.1 | Pas de correctif indiqué |
| dolphinscheduler | 1.1.0 | Pas de correctif indiqué |
| dolphinscheduler | 1.0.5 | Pas de correctif indiqué |
Références
- github.com github.com
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache DolphinScheduler
Les 46 CVE de Apache DolphinScheduler →
CVE-2026-71896
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account…
Non notée
CVE-2026-71895
An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes…
Non notée
CVE-2026-71183
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data…
Non notée
CVE-2026-66087
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance…
Non notée