Lucene search

China National Vulnerability DatabaseCNVD-2024-13577

HistoryMar 14, 2024 - 12:00 a.m.

Apache DolphinScheduler Security Bypass Vulnerability

2024-03-1400:00:00

China National Vulnerability Database

www.cnvd.org.cn

apache dolphinscheduler

modern data scheduling platform

apache foundation

security bypass vulnerability

session not logged off

password change

access restrictions

specially crafted request

attacker

cnvd

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Apache Dolphinscheduler is a modern data scheduling platform from the Apache (USA) Foundation. The Apache DolphinScheduler security bypass vulnerability, which stems from a session not being logged off after a password change, can be exploited by an attacker to bypass access restrictions by sending a specially crafted request.

CPENameOperatorVersion
apache dolphinschedulerlt3.2.0

CPE	Name	Operator	Version
	apache dolphinscheduler	lt	3.2.0