CVE-2022-45462: 
Java vulnerability analysis and mitigation

Apache DolphinScheduler versions prior to 2.0.5 contain a command execution vulnerability (CVE-2022-45462). The vulnerability exists in the alarm instance management functionality where command injection is possible when specific commands are configured. This security issue affects only authenticated users (Apache List, OSS Security).

The vulnerability is classified as a command injection flaw in the alarm instance management component of Apache DolphinScheduler. The issue occurs when specific commands are configured in the system, allowing authenticated users to execute arbitrary commands. The vulnerability has been assigned a CVSS score of 9.8, indicating critical severity (NVD).

The vulnerability allows authenticated users to execute arbitrary commands on the affected system through the alarm instance management functionality. This could potentially lead to unauthorized system access and control (NVD).

Users are recommended to upgrade to Apache DolphinScheduler version 2.0.6 or higher to address this vulnerability. This version contains the necessary security fixes to prevent command injection in the alarm instance management functionality (OSS Security).