[CVE-2026-32966] DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apa…

Descripción técnica

DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

Puntuación CVSS

Score: 9.8/10 — Severidad: CRITICAL — Estado NIST: Modified

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Dolphinscheduler — Apache

Debilidades (CWE)

CWE-863

Fuente oficial

Publicado en NIST NVD.