apache-dolphinscheduler

4 results · Feed

• High 7.5
  CVE-2023-48796

  Apache dolphinscheduler sensitive information disclosure

  Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler. The information exposed to unauthorized actors may include sensitive data such as database credentials. Users who can't upgrade to the fixed version can also …

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler apache-dolphinscheduler Maven PyPI
  Nov 24, 2023
• Critical 9.8
  CVE-2022-45875

  Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

  Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be…

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler apache-dolphinscheduler Maven PyPI
  Jan 4, 2023
• High 7.5
  CVE-2022-25598

  Apache DolphinScheduler user registration is vulnerable to ReDoS attacks

  Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler apache-dolphinscheduler Maven PyPI
  Mar 30, 2022
• Medium 6.5
  CVE-2020-13922

  Apache DolphinScheduler (incubating) Permission vulnerability

  Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler-api apache-dolphinscheduler Maven PyPI
  Jan 11, 2021