-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.dolphinscheduler:dolphinscheduler | maven | < 2.0.6 | 2.0.6 |
Miggo AIRoot Cause AnalysisThe vulnerability description indicates path traversal via the log server, which implies improper input sanitization in log file retrieval functions. The LoggerController.viewLog method is a core component handling log access in Apache DolphinScheduler. Path traversal vulnerabilities in similar systems often occur in log viewer endpoints that directly use user input to construct file paths without proper normalization. The patch in 2.0.6 would likely have added path validation/sanitization in this critical log handling component.
JavaJavaOngoing coverage of React2Shell