Junglewise Threat Intelligence

CVE-2023-49620: Apache DolphinScheduler Missing Authorization vulnerability

CVE-2023-49620 · Severity: low · CVSS 3.1 · Published 2023-11-30

Technologies: org.apache.dolphinscheduler:dolphinscheduler-api (Maven). Vendors: Maven.

Executive brief

Apache DolphinScheduler Missing Authorization vulnerability

Affected products

  • Maven org.apache.dolphinscheduler:dolphinscheduler-api
  • Maven org.apache.dolphinscheduler:dolphinscheduler-service
  • Maven org.apache.dolphinscheduler:dolphinscheduler-dao
  • Maven org.apache.dolphinscheduler:dolphinscheduler-common

Related threats