330 matches found
CVE-2025-62188
CVE-2025-62188 concerns an exposure of sensitive information via the management actuator endpoints in Apache DolphinScheduler. The affected line is 3.1.x, with guidance to upgrade to version 3.2.0 or later. A temporary workaround is to constrain exposed endpoints using the environment variable MA...
Apache DolphinScheduler 安全漏洞
Apache DolphinScheduler is a modern data orchestration platform developed by the Apache Foundation in the United States. Version 3.1.x of Apache DolphinScheduler contains a security vulnerability that exposes sensitive information, potentially allowing unauthorized access...
PT-2026-31599
Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions 3.1. Description An issue exists in Apache DolphinScheduler that may allow unauthorized actors to access sensitive information, including database credentials. As a temporary workaround, users may restrict...
CVE-2023-25601
On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack without authentication. This issue has been fixed from version 3.1.2 onwards. For users who use version 3.0.0 to 3.1.1, you can turn off the...
CVE-2023-50270
Session Fixation Apache DolphinScheduler before version 3.2.0, which session is still valid after the password change. Users are recommended to upgrade to version 3.2.1, which fixes this issue...
CVE-2023-49109
Exposure of Remote Code Execution in Apache Dolphinscheduler. This issue affects Apache DolphinScheduler: before 3.2.1. We recommend users to upgrade Apache DolphinScheduler to version 3.2.1, which fixes the issue...
CVE-2023-49068
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1. Users are recommended to upgrade to version 3.2.1, which fixes the issue. At the time of disclosure of this advisory, this version has not...
CVE-2021-27644
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. Only applicable to MySQL data source with internal login account password...
CVE-2022-26884
Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher...
Exploit for Code Injection in Apache Dolphinscheduler
No d...
EUVD-2021-0018
Malware in sbrugna...
EUVD-2021-2328
Malware in sbrugna...
EUVD-2024-0705
Malicious code in bioql PyPI...
EUVD-2022-0021
Malicious code in bioql PyPI...
EUVD-2023-0037
Malicious code in bioql PyPI...
EUVD-2024-0627
Malicious code in bioql PyPI...
EUVD-2023-3021
Malicious code in bioql PyPI...
EUVD-2023-0036
Malicious code in bioql PyPI...