PT-2021-9678

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 1.3.2 Description The issue allows an ordinary user under any tenant to override another user's password through the API interface. Recommendations For versions prior to 1.3.2, update to version 1.3.2 ...

PT-2021-5482

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 1.3.6 Description The issue is related to errors in privilege management, allowing remote attackers to execute arbitrary SQL queries. Specifically, authorized users can use SQL injection in the data...

Apache DolphinScheduler Permission License and Access Control Issues Vulnerability

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache Foundation. A security vulnerability exists in Apache DolphinScheduler prior to 1.3.2, which allows normal users to override other users' passwords via the API interface...

CVE-2020-13922: Incorrect Default Permissions

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface...

Apache DolphinScheduler 安全漏洞

Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...

Apache DolphinScheduler Remote Code Execution Vulnerability

Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...