Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-dkgs-qkj7-tqbb
Vulnerability ID VCID-dkgs-qkj7-tqbb
Aliases CVE-2023-49068
GHSA-c6cg-73p3-973h
Summary Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1. Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not yet been released. In the mean time, we recommend you make sure the logs are only available to trusted operators.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (4)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-285 Improper Authorization
System Score Found at
epss 0.0016 https://api.first.org/data/v1/epss?cve=CVE-2023-49068
generic_textual MODERATE https://github.com/apache/dolphinscheduler
generic_textual MODERATE https://github.com/apache/dolphinscheduler/commit/7308888c703fbe227887d2426273100582096134
generic_textual MODERATE https://github.com/apache/dolphinscheduler/pull/15192
generic_textual MODERATE https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2023-49068
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2023-49068
https://github.com/apache/dolphinscheduler
https://github.com/apache/dolphinscheduler/commit/7308888c703fbe227887d2426273100582096134
https://github.com/apache/dolphinscheduler/pull/15192
https://lists.apache.org/thread/jn6kr6mjdgtfgpxoq9j8q4pkfsq8zmpq
CVE-2023-49068 https://nvd.nist.gov/vuln/detail/CVE-2023-49068
GHSA-c6cg-73p3-973h https://github.com/advisories/GHSA-c6cg-73p3-973h
No exploits are available.
Exploit Prediction Scoring System (EPSS)
Percentile 0.36604
EPSS Score 0.0016
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T21:02:36.595746+00:00 GitLab Importer Import https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.dolphinscheduler/dolphinscheduler-api/CVE-2023-49068.yml 38.6.0