CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/02/14 9:30 a.m.•10 views

CVE-2022-45875

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users...

9.8CVSS6.8AI score0.0255EPSS

Exploits0References1

Circl•added 2023/01/04 6:18 p.m.•5 views

CVE-2022-45875

creationtimestamp| type| source ---|---|--- 2023-01-04 18:18:18+00:00| seen| https://t.me/cibsecurity/55896 2023-11-25 06:59:46+00:00| seen| https://t.me/arpsyndicate/577 2025-04-03 15:34:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10241...

9.8CVSS8.7AI score0.0255EPSS

Exploits0References3

Vulnrichment•added 2023/01/04 2:57 p.m.•7 views

CVE-2022-45875 Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

9.7AI score0.0255EPSS

Exploits0References2

CVE•added 2023/01/04 2:57 p.m.•82 views

CVE-2022-45875

Apache DolphinScheduler (CVE-2022-45875) is affected by improper validation of script alert plugin parameters, allowing remote command execution. The issue affects 3.0.1 and earlier, and 3.1.0 and earlier; authenticated users who can log in to DolphinScheduler could exploit it. CVSSv3.1 base scor...

9.8CVSS9.5AI score0.0255EPSS

Exploits0References2Affected Software1