Deserialization Vulnerability

Apache DolphinScheduler is vulnerable to Unsafe Deserialization. The vulnerability is due to deserialization of untrusted data in the RPC module, where attacker-controlled StandardRpcRequest objects can include malicious class types that are deserialized by Master or Worker nodes, allowing...