6.5Orta
CVE-2026-47340Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.
Açıklama
Allow authenticated users to access alert instances associated with alert groups they do not have permission to access. in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| Apache Software Foundation | Apache DolphinScheduler | < 3.4.2 | |
| apache | dolphinscheduler | < 3.4.2 |
Kaynaklar ve yamalar
- https://lists.apache.org/thread/gx6v1wjb6qg3fzksxomysspy2gw54ooc vendor-advisoryMailing ListVendor Advisory
- http://www.openwall.com/lists/oss-security/2026/06/17/5 Mailing ListThird Party Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:apache:dolphinscheduler:*:*:*:*:*:*:*:*< 3.4.2