Description
Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache DolphinScheduler | unspecified – ≤ 2.0.5 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.dolphinscheduler:dolphinscheduler-alert-plugins | < 2.0.6 | 2.0.6 | GHSA-wqg7-mx6p-2rw3 |