Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-49620
6.5
MEDIUMCVSS v3
Published
November 30, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized (which almost used in sql task), with unauthorized access vulnerability (IDOR), but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires user login to operate, please upgrade to version 3.1.0 to avoid this vulnerability
apache/dolphinscheduler
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code
GitHubApache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code< 3.1.0NVD