Threats Tagged 'ghsa-6m78-8x87-73vx'

1 threat

Threats Tagged 'ghsa-6m78-8x87-73vx'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.5%	CVE-2026-82804Apache DolphinScheduler · OS command injection High8.8EPSS 0.5%2026-09-29CVE Database V5CVE-2026-82804 CVE-2026-82804 is a high-severity OS command injection vulnerability in Apache DolphinScheduler before version 3.4.3. It arises from insufficient neutralization of shell metacharacters in the scriptPath parameter used in a shell command. An authenticated user can exploit this by crafting a resource filename with shell command substitution syntax, leading to arbitrary command execution with DolphinScheduler service privileges. The issue is fixed in version 3.4.3. EPSS 0.5%Vulnerability Apache Software Foundation #cwe-78 #ghsa-6m78-8x87-73vx	CVE Database V5	2026-09-29

Showing 1–1 of 1 result