Remote Code Execution in Apache Dolphinscheduler

2024-02-2012:30:58

Google

osv.dev

apache

dolphinscheduler

remote code execution

upgrade

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.8%

JSON

This issue affects Apache DolphinScheduler 3.0.0 before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

CPENameOperatorVersion
org.apache.dolphinscheduler:dolphinschedulereq3.1.9
org.apache.dolphinscheduler:dolphinschedulereq3.0.2
org.apache.dolphinscheduler:dolphinschedulereq3.0.5
org.apache.dolphinscheduler:dolphinschedulereq3.0.1
org.apache.dolphinscheduler:dolphinschedulereq3.1.3
org.apache.dolphinscheduler:dolphinschedulereq3.1.4
org.apache.dolphinscheduler:dolphinschedulereq3.1.6
org.apache.dolphinscheduler:dolphinschedulereq3.0.4
org.apache.dolphinscheduler:dolphinschedulereq3.2.0
org.apache.dolphinscheduler:dolphinschedulereq3.1.5

Name	Operator	Version
org.apache.dolphinscheduler:dolphinscheduler	eq	3.1.9
org.apache.dolphinscheduler:dolphinscheduler	eq	3.0.2
org.apache.dolphinscheduler:dolphinscheduler	eq	3.0.5
org.apache.dolphinscheduler:dolphinscheduler	eq	3.0.1
org.apache.dolphinscheduler:dolphinscheduler	eq	3.1.3
org.apache.dolphinscheduler:dolphinscheduler	eq	3.1.4
org.apache.dolphinscheduler:dolphinscheduler	eq	3.1.6
org.apache.dolphinscheduler:dolphinscheduler	eq	3.0.4
org.apache.dolphinscheduler:dolphinscheduler	eq	3.2.0
org.apache.dolphinscheduler:dolphinscheduler	eq	3.1.5