Remote Code Execution in Apache Dolphinscheduler

This issue affects Apache DolphinScheduler 3.0.0 before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue. 

Vulnerability ID: GHSA-qwxx-xww6-8q8m
Aliases: CVE-2023-49109
Published: 2024-02-20 12:30:58
CWE: CWE-94
Severity rating: HIGH
Affected packages:
package: ecosystem: Maven
name: org.apache.dolphinscheduler:dolphinscheduler