| CVE-2024-43202 |
Exposure of Remote Code Execution in Apache Dolphinscheduler
|
Non notée
|
20 août 2024 |
| CVE-2024-30188 |
File read and write vulnerability in Apache DolphinScheduler , authenticated users can illegally access additional…
|
Non notée
|
9 août 2024 |
| CVE-2024-29831 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Non notée
|
9 août 2024 |
| CVE-2024-23320 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Non notée
|
23 févr. 2024 |
| CVE-2023-51770 |
Arbitrary File Read Vulnerability in Apache Dolphinscheduler
|
Non notée
|
20 févr. 2024 |
| CVE-2023-50270 |
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change
|
Non notée
|
20 févr. 2024 |
| CVE-2023-49250 |
Because the HttpUtils class did not verify certificates, an attacker that could perform a Man-in-the-Middle (MITM)…
|
Non notée
|
20 févr. 2024 |
| CVE-2023-49109 |
Exposure of Remote Code Execution in Apache Dolphinscheduler
|
Non notée
|
20 févr. 2024 |
| CVE-2023-49299 |
Improper Input Validation vulnerability in Apache DolphinScheduler
|
Non notée
|
30 déc. 2023 |
| CVE-2023-49620 |
Before DolphinScheduler version 3.1.0, the login user could delete UDF function in the resource center unauthorized…
|
Non notée
|
30 nov. 2023 |
| CVE-2023-49068 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects…
|
Non notée
|
27 nov. 2023 |
| CVE-2023-48796 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler
|
Non notée
|
24 nov. 2023 |
| CVE-2023-25601 |
On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an…
|
Non notée
|
20 avr. 2023 |
| CVE-2022-45875 |
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution…
|
Non notée
|
4 janv. 2023 |
| CVE-2022-26885 |
When using tasks to read config files, there is a risk of database password disclosure
|
Non notée
|
24 nov. 2022 |
| CVE-2022-45462 |
Alarm instance management has command injection when there is a specific command configured
|
Non notée
|
23 nov. 2022 |
| CVE-2022-34662 |
When users add resources to the resource center with a relation path will cause path traversal issues and only for…
|
Non notée
|
1 nov. 2022 |
| CVE-2022-26884 |
Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher
|
6.5
Moyenne
|
28 oct. 2022 |
| CVE-2022-25598 |
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache…
|
Non notée
|
30 mars 2022 |
| CVE-2021-27644 |
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center
|
Non notée
|
1 nov. 2021 |
| CVE-2020-13922 |
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users…
|
Non notée
|
11 janv. 2021 |