Executive brief
Apache DolphinScheduler Incorrect Default Permissions Vulnerability
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler
Junglewise Threat Intelligence
CVE-2024-43166: Apache DolphinScheduler Incorrect Default Permissions Vulnerability
CVE-2024-43166 · Severity: info · Published 2025-09-03
Technologies: org.apache.dolphinscheduler:dolphinscheduler (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
- Apache DolphinScheduler has an Incorrect Authorization Vulnerability
- Apache DolphinScheduler sensitive information disclosure in management endpoints
- Apache DolphinScheduler vulnerable to Alert Script Attack
- Apache DolphinScheduler: RCE by arbitrary js execution