What is GHSA-vjqc-g788-f378?

GHSA-vjqc-g788-f378 is a security advisory published by GitHub Security Advisories with Medium severity. Session Fixation Apache DolphinScheduler

Which CVE IDs does GHSA-vjqc-g788-f378 cover?

GHSA-vjqc-g788-f378 covers the following CVE IDs: CVE-2023-50270. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-vjqc-g788-f378?

GHSA-vjqc-g788-f378 affects 1 product, including: maven/org.apache.dolphinscheduler:dolphinscheduler:\u003e= 1.3.8, \u003c 3.2.1.

GHSA-vjqc-g788-f378Medium

Session Fixation Apache DolphinScheduler

Vendor

GitHub Security Advisories

Published

February 20, 2024

Last Modified

March 24, 2026

🔗 CVE IDs covered (1)

CVE-2023-50270 →

📋 Description

Session Fixation Apache DolphinScheduler before version 3.2.1, which session is still valid after the password change.

Users are recommended to upgrade to version 3.2.1, which fixes this issue.

🎯 Affected products1

maven/org.apache.dolphinscheduler:dolphinscheduler:>= 1.3.8, < 3.2.1

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2023-50270
https://github.com/apache/dolphinscheduler/pull/15219
https://lists.apache.org/thread/94prw8hyk60vvw7s6cs3tr708qzqlwl6
https://lists.apache.org/thread/lmnf21obyos920dnvbfpwq29c1sd2r9r
http://www.openwall.com/lists/oss-security/2024/02/20/3
https://www.openwall.com/lists/oss-security/2024/02/20/3
https://github.com/advisories/GHSA-vjqc-g788-f378