CRITICALCVSS 9.3EPSS 2.1%

CVE-2024-43202

Apache Dolphinscheduler Code Injection vulnerability

Published: 2024-08-20
Modified: 2026-08-31
EPSS percentile: 81%
Aliases: GHSA-2fm6-mv57-p2qh
Sources: github-advisory

Summary

Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Maven	org.apache.dolphinscheduler:dolphinscheduler-task-api	—	3.2.2

Remediation: Upgrade to 3.2.2 or later.

References

https://github.com/advisories/GHSA-2fm6-mv57-p2qh

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.