GitHub Advisoryadvisory · Maven

GHSA-rrpj-r8h7-rm7r Apache DolphinScheduler Incorrect Default Permissions Vulnerability

LOW Published 2025-09-03 Modified 2025-09-03 Official page ↗
Aliases
CVE-2024-43166
Ecosystem
Maven
Packages
org.apache.dolphinscheduler:dolphinscheduler
Severity
Low
Weaknesses
CWE-276
Reviewed
2025-09-03

Affected packages

• Maven org.apache.dolphinscheduler:dolphinscheduler: < 3.3.1 → fixed in 3.3.1

Description

Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue.

Related

Alias · CVE (1)

  • CVE-2024-43166 Incorrect Default Permissions vulnerability in Apache DolphinScheduler. vulnerability

Weakness · CWE (1)

  • CWE-276 Incorrect Default Permissions weakness

References