CyberRota
Back to database

CVE-2025-62233

MEDIUM · CVSS 6.3 EPSS 0.05%

Source: NVD + CISA KEV + EPSS · Published: 2026-04-24 · Last synced: 2026-05-24

CyberRota Analysis

Detaylı analiz gerekiyor.

CVE
CVE-2025-62233
Severity
MEDIUM
CVSS
6.3
EPSS
0.05%
Apache

Original NVD Description

Deserialization of Untrusted Data vulnerability in Apache DolphinScheduler RPC module. This issue affects Apache DolphinScheduler:  Version >= 3.2.0 and < 3.3.1. Attackers who can access the Master or Worker nodes can compromise the system by creating a StandardRpcRequest, injecting a malicious class type into it, and sending RPC requests to the DolphinScheduler Master/Worker nodes. Users are recommended to upgrade to version [3.3.1], which fixes the issue.