CVE-2022-34662: Apache DolphinScheduler prior to 3.0.0 allows path traversal
When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher
Other sources
When users add resources to the resource center with a relation path, this vulnerability will cause path traversal issues for logged-in users. Users should upgrade to version 3.0.0 to avoid this issue.
— GitHub
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-34662.
What is the severity of CVE-2022-34662?
The severity of CVE-2022-34662 is medium, with a severity value of 6.5.
How does the vulnerability CVE-2022-34662 manifest?
The vulnerability CVE-2022-34662 manifests when users add resources to the resource center with a relation path, causing path traversal issues.
Which software versions are affected by CVE-2022-34662?
CVE-2022-34662 affects Apache DolphinScheduler versions up to, but not including, 3.0.0.
How can I fix the vulnerability CVE-2022-34662?
To fix the vulnerability CVE-2022-34662, you should upgrade to version 3.0.0 or higher of Apache DolphinScheduler.