Improve GHSA-2fm6-mv57-p2qh

sealbenb · sealbenb · commit e4a49bfa5197 · 2026-06-25T20:08:46.000+03:00
diff --git a/advisories/github-reviewed/2024/08/GHSA-2fm6-mv57-p2qh/GHSA-2fm6-mv57-p2qh.json b/advisories/github-reviewed/2024/08/GHSA-2fm6-mv57-p2qh/GHSA-2fm6-mv57-p2qh.json
@@ -9,10 +9,6 @@
   "summary": "Apache Dolphinscheduler Code Injection vulnerability",
   "details": "Exposure of Remote Code Execution in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.2. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.",
   "severity": [
-    {
-      "type": "CVSS_V3",
-      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
-    },
     {
       "type": "CVSS_V4",
       "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
@@ -29,7 +25,7 @@
           "type": "ECOSYSTEM",
           "events": [
             {
-              "introduced": "0"
+              "introduced": "3.1.0"
             },
             {
               "fixed": "3.2.2"

Original file line number	Diff line number	Diff line change
`@@ -9,10 +9,6 @@`
`9`	`9`	`"summary": "Apache Dolphinscheduler Code Injection vulnerability",`
`10`	`10`	`"details": "Exposure of Remote Code Execution in Apache Dolphinscheduler.\n\nThis issue affects Apache DolphinScheduler: before 3.2.2. \n\nWe recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.",`
`11`	`11`	`"severity": [`
`12`		`- {`
`13`		`- "type": "CVSS_V3",`
`14`		`- "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"`
`15`		`- },`
`16`	`12`	`{`
`17`	`13`	`"type": "CVSS_V4",`
`18`	`14`	`"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"`
`@@ -29,7 +25,7 @@`
`29`	`25`	`"type": "ECOSYSTEM",`
`30`	`26`	`"events": [`
`31`	`27`	`{`
`32`		`- "introduced": "0"`
	`28`	`+ "introduced": "3.1.0"`
`33`	`29`	`},`
`34`	`30`	`{`
`35`	`31`	`"fixed": "3.2.2"`