Advisoriesby Ibis
dolphinscheduler security advisories
17 advisories · 2 critical or high in 12 months · latest Apr 24
17 advisories
Apache DolphinScheduler has an Incorrect Authorization VulnerabilityCVE-2026-23902fixed in 3.4.1Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerabilityCVE-2025-62233fixed in 3.3.1Apache DolphinScheduler vulnerable to sensitive information disclosureCVE-2025-62188fixed in 3.2.0Apache DolphinScheduler vulnerable to Alert Script AttackCVE-2024-43115fixed in 3.2.2Apache DolphinScheduler Incorrect Default Permissions VulnerabilityCVE-2024-43166fixed in 3.3.1Apache DolphinScheduler: Resource File Read And Write VulnerabilityCVE-2024-30188fixed in 3.2.2Apache DolphinScheduler: RCE by arbitrary js executionCVE-2024-29831fixed in 3.2.2Improper Certificate Validation in Apache DolphinSchedulerCVE-2023-49250fixed in 3.2.1Arbitrary File Read Vulnerability in Apache DolphinschedulerCVE-2023-51770fixed in 3.2.1Session Fixation Apache DolphinSchedulerCVE-2023-50270fixed in 3.2.1Remote Code Execution in Apache DolphinschedulerCVE-2023-49109fixed in 3.2.1Apache DolphinScheduler sensitive information disclosureCVE-2023-48796fixed in 3.0.2Apache DolphinScheduler vulnerable to Improper Input ValidationCVE-2022-45875fixed in 3.0.2 +1Apache DolphinScheduler vulnerable to Path TraversalCVE-2022-34662fixed in 3.0.0Apache DolphinScheduler vulnerable to Path TraversalCVE-2022-26884fixed in 2.0.6Uncontrolled Resource Consumption in Apache DolphinSchedulerCVE-2022-25598fixed in 2.0.5Remote code execution in DolphinSchedulerCVE-2020-11974fixed in 1.3.0About dolphinscheduler
Apache DolphinScheduler is the modern data orchestration platform. Agile to create high performance workflow with low-code
Packages watched: org.apache.dolphinscheduler:dolphinscheduler (Maven).