Threats Tagged 'ghsa-rjm2-8fmf-7h67'

1 threat

Threats Tagged 'ghsa-rjm2-8fmf-7h67'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.3%	CVE-2026-66083Apache DolphinScheduler · Missing authentication for critical function Medium6.5EPSS 0.3%2026-09-29CVE Database V5CVE-2026-66083 Apache DolphinScheduler versions before 3.4.3 contain a vulnerability in the /datasources/unauth-datasource endpoint that fails to properly enforce authorization. Authenticated users can access information about data sources they should not be authorized to view, potentially exposing sensitive configuration and metadata. This issue is fixed in version 3.4.3. EPSS 0.3%Vulnerability Apache Software Foundation #cwe-306 #ghsa-rjm2-8fmf-7h67	CVE Database V5	2026-09-29

Showing 1–1 of 1 result