Apache DolphinScheduler vulnerable to Path Traversal

When users add resources to the resource center with a relation path, this vulnerability will cause path traversal issues for logged-in users. Users should upgrade to version 3.0.0 to avoid this issue.

Vulnerability ID: GHSA-fp35-xrrr-3gph
Aliases: CVE-2022-34662
Published: 2022-11-01 19:00:29
CWE: CWE-22
Severity rating: MODERATE
CVSS: type: CVSS_V3
score: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected packages:
package: ecosystem: Maven
name: org.apache.dolphinscheduler:dolphinscheduler