CVE-2022-34662: Apache Dolphinscheduler
Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.
When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher
Affected products
- Apache Dolphinscheduler: before 3.0.0 (fixed in 3.0.0)
Published 2022-11-01. Last modified 2026-06-17.