Apache DolphinScheduler: Resource File Read And Write Vulnerability

GHSA-4vv4-crw4-8pcw · CVE-2024-30188

Published Aug 12, 2024 · Modified Aug 12, 2024

Description

File read and write vulnerability in Apache DolphinScheduler, authenticated users can illegally access additional resource files.
This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2.

Users are recommended to upgrade to version 3.2.2, which fixes the issue.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-30188
PACKAGE https://github.com/apache/dolphinscheduler
WEB https://lists.apache.org/thread/tbrt42mnr42bq6scxwt6bjr3s2pwyd07

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes