CVE-2023-51770

Summary

Arbitrary File Read Vulnerability in Apache Dolphinscheduler.

This issue affects Apache DolphinScheduler: before 3.2.1.

We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

Affected Software

Weaknesses

• CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/apache/dolphinscheduler/pull/15433
• https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g
• https://lists.apache.org/thread/gpks573kn00ofxn7n9gkg6o47d03p5rw
• http://www.openwall.com/lists/oss-security/2024/02/20/2

References

• https://github.com/apache/dolphinscheduler/pull/15433
• https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g
• https://lists.apache.org/thread/gpks573kn00ofxn7n9gkg6o47d03p5rw
• http://www.openwall.com/lists/oss-security/2024/02/20/2

• ←Previous
• Next→