[<prev] [next>] [day] [month] [year] [list]
Message-ID: <e6cf0269-c893-5daf-55cd-b1b31df462e1@apache.org>
Date: Wed, 03 Sep 2025 05:05:37 +0000
From: Lidong Dai <lidongdai@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2024-43115: Apache DolphinScheduler: Alert Script Attack
Severity: low
Affected versions:
- Apache DolphinScheduler before 3.2.2
Description:
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script.
This issue affects Apache DolphinScheduler: before 3.2.2.
Users are recommended to upgrade to version 3.3.1, which fixes the issue.
Credit:
L0ne1y (reporter)
References:
https://lists.apache.org/thread/lh42ktbbg87wrr6854rd7kho83wxc6f9
https://dolphinscheduler.apache.org
https://www.cve.org/CVERecord?id=CVE-2024-43115
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
