CVE-2023-49068
Apache DolphinScheduler: Information Leakage Vulnerability
Vexday Risk Score
3Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
27 nov 2023Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1.
Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.
Produtos afetados
Apache Software Foundation · Apache DolphinSchedulerQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →