Apache DolphinScheduler Incorrect Authorization Vulnerability Allowing Use of Undefined Tenants in Workflows

A vulnerability in Apache DolphinScheduler prior to version 3.4.1 allows authenticated users with system login permissions to utilize tenants not defined on the platform during workflow execution. This incorrect authorization issue could lead to unauthorized access or manipulation of workflow processes.

Impact

Exploitation of this vulnerability could result in unauthorized use of tenants during workflow execution, potentially leading to incorrect workflow processing or resource allocation.

Remediation

Users are advised to upgrade to Apache DolphinScheduler version 3.4.1 or later, which addresses this vulnerability.