CVE-2023-49109

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

• CWE-94

• http://www.openwall.com/lists/oss-security/2024/02/20/4Mailing List, Third Party Advisory
• https://github.com/apache/dolphinscheduler/pull/14991Issue Tracking, Patch
• https://lists.apache.org/thread/5b6yq2gov0fsy9x5dkvo8ws4rr45vkn8Vendor Advisory
• https://lists.apache.org/thread/6kgsl93vtqlbdk6otttl0d8wmlspk0m5Vendor Advisory
• http://www.openwall.com/lists/oss-security/2024/02/20/4Mailing List, Third Party Advisory
• https://github.com/apache/dolphinscheduler/pull/14991Issue Tracking, Patch
• https://lists.apache.org/thread/5b6yq2gov0fsy9x5dkvo8ws4rr45vkn8Vendor Advisory
• https://lists.apache.org/thread/6kgsl93vtqlbdk6otttl0d8wmlspk0m5Vendor Advisory

Published

Feb 20, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-49103An issue was discovered in ownCloud owncloud/graphapi 0.2.x …7.5
• CVE-2023-49104An issue was discovered in ownCloud owncloud/oauth2 before 0…6.1
• CVE-2023-49105An issue was discovered in ownCloud owncloud/core before 10.…9.8
• CVE-2023-49106Missing Password Field Masking vulnerability in Hitachi Devi…7.5
• CVE-2023-49107Generation of Error Message Containing Sensitive Information…7.5
• CVE-2023-49108Path traversal vulnerability exists in RakRak Document Plus …8.8
• CVE-2023-4911A buffer overflow was discovered in the GNU C Library's dyna…7.8
• CVE-2023-49110When the Kiuwan Local Analyzer uploads the scan results to t…7.2
• CVE-2023-49111For Kiuwan installations with SSO (single sign-on) enabled, …6.5
• CVE-2023-49112Kiuwan provides an API endpoint /saas/rest/v1/info/applicat…6.5
• CVE-2023-49113The Kiuwan Local Analyzer (KLA) Java scanning application co…7.8
• CVE-2023-49114A DLL hijacking vulnerability was identified in the Qognify …6.7