CVE-2023-49068 | BDVDB-2026-217803 Detail

ApacheApache DolphinScheduler

Description#

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1. Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://github.com/apache/dolphinscheduler/pull/15192
https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq

Exploit#

No public exploit known

History#

Version 12023-11-27Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.