Incorrect Default Permissions in Apache DolphinScheduler

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2020-13922 · ADVISORY
• apache/incubator-dolphinscheduler commit b8a9e2e · WEB
• apache/incubator-dolphinscheduler · PACKAGE
• pypa/advisory-database · WEB
• mail-archive.com/announce%40apache.org/msg06076.html · WEB
• mail-archive.com/[email protected]/msg06076.html · WEB

Lỗ hổng khác của org.apache.dolphinscheduler:dolphinscheduler-api

• CVE-2026-47340TRUNG BÌNH 6.5Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinSch…
• CVE-2026-42357TRUNG BÌNH 6.5Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission…
• CVE-2026-41280TRUNG BÌNH 4.9Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects This is…
• CVE-2026-32967NGHIÊM TRỌNG 9.1Incorrect Authorization vulnerability of `/v2` experimental interface in Apache DolphinScheduler. This issue affects Apache DolphinSchedule…
• CVE-2026-32966NGHIÊM TRỌNG 9.8DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affect…