CVE-2023-51770
Apache DolphinScheduler: Arbitrary File Read Vulnerability
HIGH 7.5EPSS 1.2%
Arbitrary File Read Vulnerability in Apache Dolphinscheduler.This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.
- Affected
- Apache Software Foundation · Apache DolphinScheduler
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - EPSS
- 1.24% chance of exploitation in the next 30 days, 69th percentile
- Published
- 2024-02-20
- Updated
- 2025-03-27
Proof-of-concept exploits (1)
- shoucheng3/apache__dolphinscheduler_CVE-2023-51770_3-2-00★ · 2025-08-20
Security advisories
- https://lists.apache.org/thread/4t8bdjqnfhldh73gy9p0whlgvnnbtn7g
- https://lists.apache.org/thread/gpks573kn00ofxn7n9gkg6o47d03p5rw
- http://www.openwall.com/lists/oss-security/2024/02/20/2
- advisories/GHSA-ff2w-wm48-jhqj
- apache/dolphinscheduler/pull/15433