| CVE-2024-43202 |
Exposure of Remote Code Execution in Apache Dolphinscheduler
|
Not rated
|
Aug 20, 2024 |
| CVE-2024-30188 |
File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional…
|
Not rated
|
Aug 9, 2024 |
| CVE-2024-29831 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Not rated
|
Aug 9, 2024 |
| CVE-2024-23320 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Not rated
|
Feb 23, 2024 |
| CVE-2023-51770 |
Arbitrary File Read Vulnerability in Apache Dolphinscheduler
|
Not rated
|
Feb 20, 2024 |
| CVE-2023-50270 |
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change
|
Not rated
|
Feb 20, 2024 |
| CVE-2023-49250 |
Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM)…
|
Not rated
|
Feb 20, 2024 |
| CVE-2023-49109 |
Exposure of Remote Code Execution in Apache Dolphinscheduler
|
Not rated
|
Feb 20, 2024 |
| CVE-2023-49299 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Not rated
|
Dec 30, 2023 |
| CVE-2023-49620 |
Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized…
|
Not rated
|
Nov 30, 2023 |
| CVE-2023-49068 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects…
|
Not rated
|
Nov 27, 2023 |
| CVE-2023-48796 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler
|
Not rated
|
Nov 24, 2023 |
| CVE-2023-25601 |
On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an…
|
Not rated
|
Apr 20, 2023 |
| CVE-2022-45875 |
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution…
|
Not rated
|
Jan 4, 2023 |
| CVE-2022-26885 |
When using tasks to read config files, there is a risk of database password disclosure
|
Not rated
|
Nov 24, 2022 |
| CVE-2022-45462 |
Alarm instance management has command injection when there is a specific command configured
|
Not rated
|
Nov 23, 2022 |
| CVE-2022-34662 |
When users add resources to the resource center with a relation path will cause path traversal issues and only for…
|
Not rated
|
Nov 1, 2022 |
| CVE-2022-26884 |
Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher
|
6.5
Medium
|
Oct 28, 2022 |
| CVE-2022-25598 |
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache…
|
Not rated
|
Mar 30, 2022 |
| CVE-2021-27644 |
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center
|
Not rated
|
Nov 1, 2021 |
| CVE-2020-13922 |
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users…
|
Not rated
|
Jan 11, 2021 |