Apache DolphinScheduler: Resource File Read And Write Vulnerability

높음 8.1CVE-2024-30188 · GHSA-4vv4-crw4-8pcw · Published 12/08/2024 · updated 17/06/2026

요약

CVE-2024-30188은(는) org.apache.dolphinscheduler:dolphinscheduler, dolphinscheduler (apache)에 영향을 주는 높음 (CVSS 8.1) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 6.0%, 전체 취약점의 93.3%보다 높음.
조치: 3.2.2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.apache.dolphinscheduler:dolphinscheduler Maven	`≥ 3.1.0, < 3.2.2`	`3.2.2`
dolphinscheduler apache	`≥ 3.1.0, < 3.2.2`	`3.2.2`

Description

File read and write vulnerability in Apache DolphinScheduler, authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2.

Users are recommended to upgrade to version 3.2.2, which fixes the issue.

NVD description

File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2. Users are recommended to upgrade to version 3.2.2, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2024-30188 · ADVISORY
apache/dolphinscheduler · PACKAGE
lists.apache.org/thread/tbrt42mnr42bq6scxwt6bjr3s2pwyd07 · WEB
openwall.com/lists/oss-security/2024/08/09/7

org.apache.dolphinscheduler:dolphinscheduler의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.dolphinscheduler:dolphinscheduler

Maven

≥ 3.1.0, < 3.2.2

3.2.2

dolphinscheduler

apache

≥ 3.1.0, < 3.2.2

3.2.2

Description

File read and write vulnerability in Apache DolphinScheduler, authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2.

Users are recommended to upgrade to version 3.2.2, which fixes the issue.

NVD description

org.apache.dolphinscheduler:dolphinscheduler의 다른 취약점

모두 보기 →