You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Zihao Xiang <zi...@apache.org> on 2023/11/24 05:29:43 UTC

CVE-2023-49068: Apache DolphinScheduler: Information Leakage Vulnerability

Severity: important

Affected versions:

- Apache DolphinScheduler before 3.2.1

Description:

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: 3.2.1.

Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

References:

https://github.com/apache/dolphinscheduler/pull/15192
https://dolphinscheduler.apache.org
https://www.cve.org/CVERecord?id=CVE-2023-49068