CVE-2023-49109
Remote Code Execution in Apache Dolphinscheduler
CRITICAL 9.8EPSS 2.3%
Exposure of Remote Code Execution in Apache Dolphinscheduler.This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
- Affected
- Apache Software Foundation · Apache DolphinScheduler
- CVSS v3.1 CNA
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.30% chance of exploitation in the next 30 days, 83rd percentile
- Published
- 2024-02-20
- Updated
- 2025-02-13
Proof-of-concept exploits (1)
- shoucheng3/apache__dolphinscheduler_CVE-2023-49109_3-2-00★ · 2025-08-19
Security advisories
- https://lists.apache.org/thread/5b6yq2gov0fsy9x5dkvo8ws4rr45vkn8
- https://lists.apache.org/thread/6kgsl93vtqlbdk6otttl0d8wmlspk0m5
- http://www.openwall.com/lists/oss-security/2024/02/20/4
- advisories/GHSA-qwxx-xww6-8q8m
- apache/dolphinscheduler/pull/14991