CVE-2023-50270

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.2.1

Description The issue is related to session fixation, where a session remains valid after a password change. This could potentially allow unauthorized access. Users are advised to upgrade to a version that fixes this issue.

Recommendations For Apache DolphinScheduler versions prior to 3.2.1, upgrade to version 3.2.1 to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the application until the upgrade is applied.