title: Apache DolphinScheduler prior to 3.0.0 allows path traversal
description: When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
vendor: Apache Software Foundation
product: Apache DolphinScheduler
versions:
version: Apache DolphinScheduler, status: affected, lessThanOrEqual: 3.0.0-beta-1, versionType: custom
}
metrics:
other: [
type: unknown
content: {'other': 'moderate'}
]