Product · Apache Software Foundation

Apache DolphinScheduler

46 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 6.5

CVE-2022-34662 Public exploit

Apache DolphinScheduler prior to 3.0.0 allows path traversal

When users add resources to the resource center with a relation path will cause path traversal issues and only for logged-in users. You could upgrade to version 3.0.0 or higher

Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven

Nov 1, 2022
Medium 6.5

CVE-2022-26884 Public exploit

Apache DolphinScheduler exposes files without authentication

Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.

Apache Software Foundation Apache DolphinScheduler org.apache.dolphinscheduler:dolphinscheduler Maven

Oct 28, 2022