Not rated
CVE-2021-27644 In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center
Description
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache DolphinScheduler 1.3 | earliest → < 1.3.6 | 1.3.6 |
Other CVEs of Apache DolphinScheduler
The 46 CVEs of Apache DolphinScheduler →
CVE-2026-71896
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to retrieve other users' account…
Not rated
CVE-2026-71895
An authorization vulnerability in Apache DolphinScheduler allows authenticated non-admin users to retrieve Kubernetes…
Not rated
CVE-2026-71183
An authorization vulnerability in Apache DolphinScheduler allows authenticated users to obtain information about data…
Not rated
CVE-2026-66087
An authorization bypass vulnerability in Apache DolphinScheduler allows authenticated users to operate task instance…
Not rated