title: Remote Code Execution in Apache Dolphinscheduler
description: Exposure of Remote Code Execution in Apache Dolphinscheduler.
This issue affects Apache DolphinScheduler: before 3.2.1.
We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
problem types: CWE-94 Improper Control of Generation of Code ('Code Injection')
affected:
{
defaultStatus: unaffected
product: Apache DolphinScheduler
vendor: Apache Software Foundation
versions:
lessThan: 3.2.1, status: affected, version: 3.0.0, versionType: semver
}
metrics:
other: [
content: {'text': 'important'}
type: Textual description of severity
]