Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-85515
HistoryNov 25, 2022 - 12:00 a.m.

Apache DolphinScheduler Command Injection Vulnerability

2022-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
apache dolphinscheduler
command injection
vulnerability
remote code execution
alert manager

EPSS

0.009

Percentile

82.7%

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache Foundation.A command injection vulnerability exists in versions of Apache DolphinScheduler prior to 2.0.6, which stems from a command injection at the alert instance manager when a specific command is configured. An attacker could exploit this vulnerability to inject commands.

EPSS

0.009

Percentile

82.7%