CVE-2023-50270

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 20/02/2024 Updated: 23/02/2024

Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue.

Severity: important Affected versions: - Apache DolphinScheduler 138 through 320 Description: Session Fixation Apache DolphinScheduler before version 320, which session is still valid after the password change Users are recommended to upgrade to version 321, which fixes this issue Credit: lujiefsi (finder) References: git ...

https://github.com/apache/dolphinscheduler/pull/15219 https://lists.apache.org/thread/lmnf21obyos920dnvbfpwq29c1sd2r9r https://lists.apache.org/thread/94prw8hyk60vvw7s6cs3tr708qzqlwl6 https://www.openwall.com/lists/oss-security/2024/02/20/3 https://nvd.nist.gov https://seclists.org/oss-sec/2024/q1/147

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-50270

Vulnerability Summary

Mailing Lists

References

Vulmon Search

About

Products

Connect