Skip to content

Remote Code Execution in Apache Dolphinscheduler

High severity GitHub Reviewed Published Feb 20, 2024 to the GitHub Advisory Database • Updated Feb 21, 2024

Package

maven org.apache.dolphinscheduler:dolphinscheduler (Maven)

Affected versions

>= 3.0.0, < 3.2.1

Patched versions

3.2.1

Description

This issue affects Apache DolphinScheduler 3.0.0 before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

References

Published by the National Vulnerability Database Feb 20, 2024
Published to the GitHub Advisory Database Feb 20, 2024
Reviewed Feb 21, 2024
Last updated Feb 21, 2024

Severity

High

Weaknesses

CVE ID

CVE-2023-49109

GHSA ID

GHSA-qwxx-xww6-8q8m

Source code

Checking history
See something to contribute? Suggest improvements for this vulnerability.