CVE-2022-45462 — Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability

CVE-2022-45462

Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability PUBLISHED

Description (CNA)

Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache DolphinScheduler	affected unspecified through 2.0.5

CWE

CWE-77

References

https://lists.apache.org/thread/2f126y32bf1v3mvxkdgt2jr5j3l1t01w
http://www.openwall.com/lists/oss-security/2022/11/23/1

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/2f126y32bf1v3mvxkdgt2jr5j3l1t01w
http://www.openwall.com/lists/oss-security/2022/11/23/1

CISA-ADP

No English description supplied.

No references supplied.