CVE-2024-43202

CVSS V2 None CVSS V3 None

Description

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.

Overview

CVE ID
CVE-2024-43202

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-08-20T07:29:43.170Z

Last Modified Date
2024-08-20T15:02:42.396Z

Weakness Enumerations

CWE	URL
CWE-94	http://cwe.mitre.org/data/definitions/94.html

References

Reference URL	Reference Tags
https://github.com/apache/dolphinscheduler/pull/15758	patch
https://lists.apache.org/thread/nlmdp7q7l7o3l27778vxc5px24ncr5r5	vendor-advisory
https://lists.apache.org/thread/qbhk9wqyxhrn4z7m4m343wqxpwg926nh	vendor-advisory
https://www.cve.org/CVERecord?id=CVE-2023-49109	related

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-43202
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-43202

History

Created	Old Value	New Value	Data Type	Notes
2024-08-21 13:19:08				Added to TrackCVE