Lucene search
+L

8 matches found

NVD
NVD
•added 2023/01/04 3:15 p.m.•53 views

CVE-2022-45875

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users...

9.8CVSS9.5AI score0.0255EPSS
SaveExploits0References2
PyPA
PyPA
•added 2023/01/04 3:15 p.m.•15 views

PYSEC-2023-4

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions...

9.8CVSS7.4AI score0.0255EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/01/04 2:57 p.m.•58 views

CVE-2022-45875 Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users...

9.7AI score0.0255EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/04 2:57 p.m.•110 views

CVE-2022-45875

Apache DolphinScheduler (CVE-2022-45875) is affected by improper validation of script alert plugin parameters, allowing remote command execution. The issue affects 3.0.1 and earlier, and 3.1.0 and earlier; authenticated users who can log in to DolphinScheduler could exploit it. CVSSv3.1 base scor...

9.8CVSS9.5AI score0.0255EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/04 2:57 p.m.•14 views

CVE-2022-45875 Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users...

9.7AI score0.0255EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/04 12:00 a.m.•5 views

CVE-2022-45875: Improper Input Validation

Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users...

9.8CVSS5.9AI score0.0255EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/04 12:00 a.m.•20 views

Apache DolphinScheduler 输入验证错误漏洞

Apache DolphinScheduler, a distributed DAG visualization-based workflow task scheduling system from the Apache Foundation, is vulnerable to an input validation error in Apache DolphinScheduler, which stems from incorrect validation of the script alert plugin parameter. No detailed vulnerability...

9.8CVSS6.9AI score0.0255EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/01/04 12:00 a.m.•10 views

PT-2023-14788 · Apache · Apache Dolphinscheduler

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions 3.0.1 and prior versions Apache DolphinScheduler versions 3.1.0 and prior versions Description: The issue is related to improper validation of script alert plugin parameters in Apache DolphinScheduler, which c...

9.8CVSS8.2AI score0.0255EPSS
SaveExploits0References12
Rows per page
Query Builder