Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-34662

Apache DolphinScheduler prior to 3.0.0 allows path traversal

Description

When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache DolphinScheduler

  • Apache DolphinScheduler to ≤ 3.0.0-beta-1affected

References