IT-Sentinel

« BACK_TO_HOME

PUBLISHED

2026-09-29 14:17

MODIFIED

2026-09-29 14:17

EPSS (Prob. Exploit)

0.18%

Top 92.7%

DATA SOURCES:

NVD 🔗 2026-09-29 CWE MITRE 🔗 2026-10-01 FIRST EPSS 🔗 2026-10-19

> DESCRIPTION

An improper authorization check in Apache DolphinScheduler allows an authenticated user to use the batch-copy and batch-move endpoints to operate on workflows in projects for which they lack the required permissions. This may allow the user to copy or move workflows from unauthorized projects. This issue affects Apache DolphinScheduler: before 3.4.3. Users are recommended to upgrade to version 3.4.3, which fixes the issue.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-863

> CWE DETAILED DESCRIPTIONS

CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

> HISTORIQUE DES MODIFICATIONS

Première apparition

29/09/2026 14:17

Source: NVD

📊 ENRICHISSEMENT 01/10/2026 06:01

CWE

Champ modifié: Description CWE

Ancienne valeur:

N/A

Nouvelle valeur:

CWE-863: Incorrect Authorization - The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Total des modifications: 1 Dernière mise à jour: 3 weeks ago

> REFERENCES

https://lists.apache.org/thread.html/ksnowtbpd9t4mbtvvq2c9777j42784dv