CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler
Exposure of Remote Code Execution in Apache Dolphinscheduler.
This issue affects Apache DolphinScheduler: before 3.2.1.
We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
Other sources
This issue affects Apache DolphinScheduler 3.0.0 before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.dolphinscheduler:dolphinschedulerto a version that resolves this vulnerability.Fixed in 3.2.1 - Upgrade
Upgrade
Apache DolphinSchedulerto a version that resolves this vulnerability.Fixed in 3.2.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49109?
CVE-2023-49109 has been classified as a vulnerability that allows for remote code execution.
How do I fix CVE-2023-49109?
The recommended fix for CVE-2023-49109 is to upgrade Apache DolphinScheduler to version 3.2.1 or later.
Which versions of Apache DolphinScheduler are affected by CVE-2023-49109?
CVE-2023-49109 affects Apache DolphinScheduler versions from 3.0.0 up to, but not including, 3.2.1.
What impact does CVE-2023-49109 have on my system?
CVE-2023-49109 can lead to unauthorized remote code execution, potentially compromising system integrity.
Is there a workaround for CVE-2023-49109?
No official workaround has been documented for CVE-2023-49109; upgrading is the only recommended action.