DolphinScheduler Remote Code Execution Vulnerability

CVE-2024-43202

Currently unrated 🤨

Key Information

Vendor
Apache
Status
Apache Dolphinscheduler
Vendor
CVE Published:
20 August 2024

Summary

Exposure of Remote Code Execution in Apache Dolphinscheduler.

This issue affects Apache DolphinScheduler: before 3.2.2.

We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.

Affected Version(s)

Apache DolphinScheduler < 3.2.2

References

https://github.com/apache/dolphinscheduler/pull/15758
patch
https://lists.apache.org/thread/nlmdp7q7l7o3l27778vxc5px2...
vendor-advisory
https://lists.apache.org/thread/qbhk9wqyxhrn4z7m4m343wqxp...
vendor-advisory

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database

Credit

an4er
.