CVE-2024-30188

CVE-2024-30188: Apache DolphinScheduler: Resource File Read And Write Vulnerability

Vendor Apache Software Foundation

Product Apache DolphinScheduler

Weakness CWE-20 · Input validation

Published August 9, 2024

Last update March 13, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

Description

File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional resource files. This issue affects Apache DolphinScheduler: from 3.1.0 before 3.2.2. Users are recommended to upgrade to version 3.2.2, which fixes the issue.

Key dates

Disclosure timeline

August 9, 2024 CVE published

March 13, 2025 Record updated