Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-72239
HistoryApr 23, 2023 - 12:00 a.m.

Apache DolphinScheduler Authorization Issues Vulnerability

2023-04-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
apache dolphinscheduler
distributed dag visualization
workflow task scheduling
authorization problem
incorrect authentication
vulnerability
exploit
socket byte attack
unauthorized access
security

0.002 Low

EPSS

Percentile

61.4%

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache (Apache) Foundation in the United States. Apache DolphinScheduler suffers from an authorization problem vulnerability that stems from the presence of incorrect authentication, which can be exploited by an attacker to use a socket byte attack without authentication.

0.002 Low

EPSS

Percentile

61.4%