What is GHSA-c6cg-73p3-973h?

GHSA-c6cg-73p3-973h is a security advisory published by GitHub Security Advisories with Medium severity. Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Which CVE IDs does GHSA-c6cg-73p3-973h cover?

GHSA-c6cg-73p3-973h covers the following CVE IDs: CVE-2023-49068. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-c6cg-73p3-973h?

GHSA-c6cg-73p3-973h affects 1 product, including: maven/org.apache.dolphinscheduler:dolphinscheduler-api:\u003c 3.2.1.

GHSA-c6cg-73p3-973hMedium

Apache DolphinScheduler Exposure of Sensitive Information to an Unauthorized Actor vulnerability

Vendor

GitHub Security Advisories

Published

November 27, 2023

Last Modified

November 28, 2023

🔗 CVE IDs covered (1)

CVE-2023-49068 →

📋 Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.1.

Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.

🎯 Affected products1

maven/org.apache.dolphinscheduler:dolphinscheduler-api:< 3.2.1

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2023-49068
https://github.com/apache/dolphinscheduler/pull/15192
https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq
https://github.com/apache/dolphinscheduler/commit/7308888c703fbe227887d2426273100582096134
https://github.com/advisories/GHSA-c6cg-73p3-973h