Apache

Dolphinscheduler

24 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2022-25598

  • EPSS 1.31%
  • Published 30.03.2022 10:15:08
  • Last modified 21.11.2024 06:52:24

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

8.8

CVE-2021-27644

  • EPSS 3.42%
  • Published 01.11.2021 10:15:11
  • Last modified 21.11.2024 05:58:21

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)

6.5

CVE-2020-13922

  • EPSS 0.83%
  • Published 11.01.2021 10:15:13
  • Last modified 21.11.2024 05:02:09

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

9.8

CVE-2020-11974

  • EPSS 11.35%
  • Published 18.12.2020 21:15:12
  • Last modified 21.11.2024 04:59:01

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.