You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by Lidong Dai <li...@apache.org> on 2025/09/03 05:05:51 UTC

CVE-2024-43166: Apache DolphinScheduler: CWE-276 Incorrect Default Permissions

Severity: low 

Affected versions:

- Apache DolphinScheduler before 3.2.2

Description:

Incorrect Default Permissions vulnerability in Apache DolphinScheduler.

This issue affects Apache DolphinScheduler: before 3.2.2.

Users are recommended to upgrade to version 3.3.1, which fixes the issue.

Credit:

L0ne1y (reporter)

References:

https://lists.apache.org/thread/bzwc397wv9yywqttxn2ohtfp0lvg454y
https://dolphinscheduler.apache.org
https://www.cve.org/CVERecord?id=CVE-2024-43166