CVE-2023-25601

On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the python-gateway function by changing the value `python-gateway.enabled=false` in configuration file `application.yaml`. If you are using the python gateway, please upgrade to version 3.1.2 or above.

• CWE-287

• http://www.openwall.com/lists/oss-security/2023/04/20/10Mailing List
• https://lists.apache.org/thread/25g77jqczp3t8cz56hk1p65q7m6c64rfMailing List
• http://www.openwall.com/lists/oss-security/2023/04/20/10Mailing List
• https://lists.apache.org/thread/25g77jqczp3t8cz56hk1p65q7m6c64rfMailing List

Published

Apr 20, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25596 A vulnerability exists in ClearPass Policy Manager that all…4.9
• CVE-2023-25597A vulnerability in the web conferencing component of Mitel M…5.9
• CVE-2023-25598A vulnerability in the conferencing component of Mitel MiVoi…6.1
• CVE-2023-25599A vulnerability in the conferencing component of Mitel MiVoi…7.4
• CVE-2023-2560A vulnerability was found in jja8 NewBingGoGo up to 2023.5.5…6.1
• CVE-2023-25600An issue was discovered in InsydeH2O. A malicious operating …7.1
• CVE-2023-25602A stack-based buffer overflow in Fortinet FortiWeb 6.4 all v…7.8
• CVE-2023-25603A permissive cross-domain policy with untrusted domains vuln…9.1
• CVE-2023-25604An insertion of sensitive information into log file vulnerab…5.5
• CVE-2023-25605A improper access control vulnerability in Fortinet FortiSOA…7.2
• CVE-2023-25606An improper limitation of a pathname to a restricted directo…6.5
• CVE-2023-25607An improper neutralization of special elements used in an OS…7.8