CVE-2024-30188

HIGH NUCLEI

Apache DolphinScheduler <3.2.2 - Info Disclosure

Title source: llm

Description

File read and write vulnerability in Apache DolphinScheduler ,  authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2. Users are recommended to upgrade to version 3.2.2, which fixes the issue.

Nuclei Templates (1)

Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write
HIGHVERIFIEDby iamnoooob,rootxharsh,pdresearch
Shodan: http.title:"dolphinscheduler"
FOFA: title="dolphinscheduler"

References (2)

Scores

CVSS v3 8.1
EPSS 0.8824
EPSS Percentile 99.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Classification

CWE
CWE-20
Status published

Affected Products (2)

apache/dolphinscheduler < 3.2.2
org.apache.dolphinscheduler/dolphinscheduler < 3.2.2Maven

Timeline

Published Aug 12, 2024
Tracked Since Feb 18, 2026