Apache DolphinScheduler Permission License and Access Control Issues Vulnerability

Apache DolphinScheduler is a distributed DAG visualization-based workflow task scheduling system from the Apache Foundation. A security vulnerability exists in Apache DolphinScheduler prior to 1.3.2, which allows normal users to override other users' passwords via the API interface...

CVE-2020-11974

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database...

CVE-2020-11974

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database...

Remote code execution

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database...

CVE-2020-11974

Technical details for CVE-2020-11974 are not publicly available in the provided documents. No affected products/versions/fixes are specified beyond the initial description. Monitor for updates.

Apache DolphinScheduler 安全漏洞

Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...

CVE-2020-11974

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database...

Apache DolphinScheduler Remote Code Execution Vulnerability

Apache DolphinScheduler is a distributed decentralized , easily scalable visual DAG workflow task scheduling system . Committed to solving the intricate dependencies in the data processing process , so that the scheduling system in the data processing process out of the box . Apache...

Remote Code Execution (RCE)

dolphinscheduler-dao is vulnerable to remote code execution. Using MySQL database with connectorj, an attacker can inject a malicious code in the DolphinScheduler server through jdbc connect parameters input "detectCustomCollations":true,"autoDeserialize":true...

Authorization Bypass

dolphinscheduler-api is vulnerable to authorization bypass. An authenticated user under any tenant is able to override the passwords of other users via the API interface /dolphinscheduler/users/update...