Executive brief
Apache DolphinScheduler's python gateway suffered from improper authentication
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler-api
Junglewise Threat Intelligence
CVE-2023-25601: Apache DolphinScheduler's python gateway suffered from improper authentication
CVE-2023-25601 · Severity: low · CVSS 3.1 · Published 2023-04-20
Technologies: org.apache.dolphinscheduler:dolphinscheduler-api (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler incorrect authorization in alert instances
- Apache DolphinScheduler incorrect authorization in workflow instances
- Apache DolphinScheduler incorrect authorization in task deletion
- Apache DolphinScheduler incorrect authorization in /v2 interface
- Apache DolphinScheduler authorization bypass in DataSource API