org.apache.dolphinscheduler:dolphinscheduler

4 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-43166

  Apache DolphinScheduler Incorrect Default Permissions Vulnerability

  Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  Sep 3, 2025
• Critical 9.8
  CVE-2023-49109 Public exploit

  Remote Code Execution in Apache Dolphinscheduler

  Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  Feb 20, 2024
• Critical 9.8
  CVE-2022-45875

  Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

  Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be…

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler apache-dolphinscheduler Maven PyPI
  Jan 4, 2023
• Critical 9.8
  CVE-2020-11974

  Remote code execution in DolphinScheduler

  In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.

  org.apache.dolphinscheduler:dolphinscheduler Maven
  Dec 18, 2020