4 matches found
CVE-2026-71899
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
EUVD-2026-88816
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...
CVE-2026-71899
Apache DolphinScheduler versions 3.2.0 through 3.4.3 are vulnerable to a missing authorization flaw in the query-dynamic-sub-workflows API. The root cause is the failure of the API to verify if an authenticated user possesses the necessary permissions to access the specific workflows being querie...
CVE-2026-71899 Apache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information Disclosure
A missing authorization vulnerability exists in the query-dynamic-sub-workflows API of Apache DolphinScheduler. The API does not properly verify whether the authenticated user has permission to access the workflows being queried. An authenticated user who does not have permission to access a...