Executive brief
Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler-api
Junglewise Threat Intelligence
CVE-2023-49068: Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability
CVE-2023-49068 · Severity: info · Published 2023-11-27
Technologies: org.apache.dolphinscheduler:dolphinscheduler-api (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler incorrect authorization in alert instances
- Apache DolphinScheduler incorrect authorization in workflow instances
- Apache DolphinScheduler incorrect authorization in task deletion
- Apache DolphinScheduler incorrect authorization in /v2 interface
- Apache DolphinScheduler authorization bypass in DataSource API