Skip to content

Arbitrary File Read Vulnerability in Apache Dolphinscheduler

High severity GitHub Reviewed Published Feb 20, 2024 to the GitHub Advisory Database • Updated Feb 21, 2024

Package

maven org.apache.dolphinscheduler:dolphinscheduler (Maven)

Affected versions

< 3.2.1

Patched versions

3.2.1

Description

Arbitrary File Read Vulnerability in Apache Dolphinscheduler.

This issue affects Apache DolphinScheduler: before 3.2.1.

We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

References

Published by the National Vulnerability Database Feb 20, 2024
Published to the GitHub Advisory Database Feb 20, 2024
Last updated Feb 21, 2024
Reviewed Feb 21, 2024

Severity

High

EPSS score

0.045%
(17th percentile)

Weaknesses

CVE ID

CVE-2023-51770

GHSA ID

GHSA-ff2w-wm48-jhqj
Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.