-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.dolphinscheduler:dolphinscheduler | maven | < 3.0.0 | 3.0.0 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper path validation when handling user-supplied 'relation path' parameters. In Java-based systems, path traversal vulnerabilities typically occur in functions that: 1. Receive user input via API endpoints (Controller layer) 2. Process file paths in service methods (Service layer) without proper canonicalization. The ResourceService.createResource is a high-confidence candidate as resource management core logic would reside here, while the ResourceController.uploadResource is medium confidence as it's the entry point but might delegate validation to service layers. Both would fail to properly sanitize paths using methods like getCanonicalPath() with base directory checks.
JavaJavaOngoing coverage of React2Shell