Apache DolphinScheduler

5 results · Clear filters · Feed

• Critical 9.8
  CVE-2024-43166

  Apache DolphinScheduler Incorrect Default Permissions Vulnerability

  Incorrect Default Permissions vulnerability in Apache DolphinScheduler. This issue affects Apache DolphinScheduler: before 3.2.2. Users are recommended to upgrade to version 3.3.1, which fixes the issue.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  Sep 3, 2025
• Critical 9.8
  CVE-2024-43202 Public exploit

  Apache DolphinScheduler: Remote Code Execution Vulnerability

  Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.2. We recommend users to upgrade Apache DolphinScheduler to version 3.2.2, which fixes the issue.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler-task-api Maven
  Aug 20, 2024
• Critical 9.8
  CVE-2023-49109 Public exploit

  Remote Code Execution in Apache Dolphinscheduler

  Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue.

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven
  Feb 20, 2024
• Critical 9.8
  CVE-2022-45875

  Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

  Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be…

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler apache-dolphinscheduler Maven PyPI
  Jan 4, 2023
• Critical 9.8
  CVE-2022-45462

  Apache DolphinScheduler prior to 2.0.5 have command execution vulnerability

  Alarm instance management has command injection when there is a specific command configured. It is only for logged-in users. We recommend you upgrade to version 2.0.6 or higher

  Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler-alert-plugins Maven
  Nov 23, 2022