CVE-2023-49620
4 advisories.
Maven/org.apache.dolphinscheduler:dolphinscheduler-api CVE-2023-49620: medium 6.5
Apache DolphinScheduler Missing Authorization vulnerability
Action: Upgrade org.apache.dolphinscheduler:dolphinscheduler-api to 3.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-r44q-98gx-pmh2
- https://nvd.nist.gov/vuln/detail/CVE-2023-49620
- https://github.com/apache/dolphinscheduler/pull/10307
- https://github.com/apache/dolphinscheduler/commit/a4948f58e671ab263060da1de255af3ecd2530ac
- https://github.com/apache/dolphinscheduler
- https://lists.apache.org/thread/zm4t1ykj4cro1c8183q7y32z0yzfz8yj
- http://www.openwall.com/lists/oss-security/2023/11/30/4
CVE-2023-49620 · published · modified · JSON
Maven/org.apache.dolphinscheduler:dolphinscheduler-common CVE-2023-49620: medium 6.5
Apache DolphinScheduler Missing Authorization vulnerability
Action: Upgrade org.apache.dolphinscheduler:dolphinscheduler-common to 3.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-r44q-98gx-pmh2#Maven/org.apache.dolphinscheduler:dolphinscheduler-common
- https://nvd.nist.gov/vuln/detail/CVE-2023-49620
- https://github.com/apache/dolphinscheduler/pull/10307
- https://github.com/apache/dolphinscheduler/commit/a4948f58e671ab263060da1de255af3ecd2530ac
- https://github.com/apache/dolphinscheduler
- https://lists.apache.org/thread/zm4t1ykj4cro1c8183q7y32z0yzfz8yj
- http://www.openwall.com/lists/oss-security/2023/11/30/4
CVE-2023-49620 · published · modified · JSON
Maven/org.apache.dolphinscheduler:dolphinscheduler-dao CVE-2023-49620: medium 6.5
Apache DolphinScheduler Missing Authorization vulnerability
Action: Upgrade org.apache.dolphinscheduler:dolphinscheduler-dao to 3.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-r44q-98gx-pmh2#Maven/org.apache.dolphinscheduler:dolphinscheduler-dao
- https://nvd.nist.gov/vuln/detail/CVE-2023-49620
- https://github.com/apache/dolphinscheduler/pull/10307
- https://github.com/apache/dolphinscheduler/commit/a4948f58e671ab263060da1de255af3ecd2530ac
- https://github.com/apache/dolphinscheduler
- https://lists.apache.org/thread/zm4t1ykj4cro1c8183q7y32z0yzfz8yj
- http://www.openwall.com/lists/oss-security/2023/11/30/4
CVE-2023-49620 · published · modified · JSON
Maven/org.apache.dolphinscheduler:dolphinscheduler-service CVE-2023-49620: medium 6.5
Apache DolphinScheduler Missing Authorization vulnerability
Action: Upgrade org.apache.dolphinscheduler:dolphinscheduler-service to 3.1.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.0 | - |
Fixed versions
| 3.1.0 |
Sources
- osv: GHSA-r44q-98gx-pmh2#Maven/org.apache.dolphinscheduler:dolphinscheduler-service
- https://nvd.nist.gov/vuln/detail/CVE-2023-49620
- https://github.com/apache/dolphinscheduler/pull/10307
- https://github.com/apache/dolphinscheduler/commit/a4948f58e671ab263060da1de255af3ecd2530ac
- https://github.com/apache/dolphinscheduler
- https://lists.apache.org/thread/zm4t1ykj4cro1c8183q7y32z0yzfz8yj
- http://www.openwall.com/lists/oss-security/2023/11/30/4
CVE-2023-49620 · published · modified · JSON