CVE-2024-43115

Published: Sep 3, 2025Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue.

Affected (1)

Products: Apache: Dolphinscheduler

1 product

Dolphinscheduler

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apache Dolphinscheduler	Before 3.2.2

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://lists.apache.org/thread/qm36nrsv1vrr2j4o5q2wo75h3686hrnj

Source: security@apache.org

Mailing List

http://www.openwall.com/lists/oss-security/2025/09/03/1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.