CVE-2023-50270
Apache DolphinScheduler: Session do not expire after password change
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change.
Users are recommended to upgrade to version 3.2.1, which fixes this issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Productos afectados
Apache Software Foundation · Apache DolphinScheduler¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →