Lucene search
+L

2 matches found

Cvelist
Cvelist
•added 2023/11/30 8:17 a.m.•31 views

CVE-2023-49620 Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for

Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized which almost used in sql task, with unauthorized access vulnerability IDOR, but after version 3.1.0 we fixed this issue. We mark this cve as moderate level because it still requires...

6.5AI score0.01132EPSS
SaveExploits0References3
Rows per page
Query Builder