CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler
Exposure of Remote Code Execution in Apache Dolphinscheduler.
This issue affects Apache DolphinScheduler: before 3.2.1.
We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
Other sources
This issue affects Apache DolphinScheduler 3.0.0 before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
— GitHub
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49109?
CVE-2023-49109 has been classified as a vulnerability that allows for remote code execution.
How do I fix CVE-2023-49109?
The recommended fix for CVE-2023-49109 is to upgrade Apache DolphinScheduler to version 3.2.1 or later.
Which versions of Apache DolphinScheduler are affected by CVE-2023-49109?
CVE-2023-49109 affects Apache DolphinScheduler versions from 3.0.0 up to, but not including, 3.2.1.
What impact does CVE-2023-49109 have on my system?
CVE-2023-49109 can lead to unauthorized remote code execution, potentially compromising system integrity.
Is there a workaround for CVE-2023-49109?
No official workaround has been documented for CVE-2023-49109; upgrading is the only recommended action.