CVE-2026-49050 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens

General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2. Users are recommended to upgrade to version 3.4.2, which fixes the issue.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-863	Incorrect Authorization The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

참고 자료

https://lists.apache.org/thread/0lc4t5k6h6nhd8t4hshgjk6yp3cl8sb0
Tags : vendor-advisory