Where
-Infinity
0

Apache DolphinschedulerApache DolphinScheduler: Deserialization of untrusted data in RPC

Risk 48
Severity
6.3
First published (updated )

Apache DolphinschedulerApache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.

Risk 63
Severity
8.1
First published (updated )

Apache DolphinschedulerApache DolphinScheduler: Users can access sensitive information through the actuator endpoint.

Risk 43
Severity
7.5
First published (updated )

Apache DolphinschedulerApache DolphinScheduler: Remote Code Execution Vulnerability

Risk 91
Severity
9.8
First published (updated )

CVE-2024-43202: Apache DolphinScheduler: mote Code Execution Vulnerability

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Resource File Read And Write Vulnerability

Risk 84
Severity
8.8
First published (updated )

Apache DolphinschedulerApache DolphinScheduler: RCE by arbitrary js execution

Risk 84
Severity
8.8
First published (updated )

CVE-2024-30188: Apache DolphinScheduler: source File ad And Write Vulnerability

CVE-2024-29831: Apache DolphinScheduler: RCE by arbitrary js execution

maven/org.apache.dolphinscheduler:dolphinscheduler-masterApache DolphinScheduler: Arbitrary js execution as root for authenticated users

Risk 59
Severity
8.8
EPSS
0.04%
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2024-23320: Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Arbitrary File Read Vulnerability

Risk 46
Severity
7.5
First published (updated )

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Session do not expire after password change

Risk 42
Severity
6.5
First published (updated )

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil

Risk 54
Severity
7.3
First published (updated )

maven/org.apache.dolphinscheduler:dolphinschedulerRemote Code Execution in Apache Dolphinscheduler

Risk 91
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler

CVE-2023-50270: Apache DolphinScheduler: Session do not expire after password change

CVE-2023-51770: Apache DolphinScheduler: Arbitrary File Read Vulnerability

CVE-2023-49250: Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil

maven/org.apache.dolphinscheduler:dolphinscheduler-masterApache DolphinScheduler: Arbitrary js execute as root for authenticated users

Risk 84
Severity
8.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2023-49299: Apache DolphinScheduler: Arbitrary js execute as root for authenticated users

Apache DolphinschedulerApache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for

Risk 40
Severity
6.5
First published (updated )

CVE-2023-49620: Apache DolphinScheduler: Authenticated users could delete UDFs in resouece center they were not authorized

maven/org.apache.dolphinscheduler:dolphinscheduler-apiApache DolphinScheduler: Information Leakage Vulnerability

Risk 46
Severity
7.5
First published (updated )

Apache DolphinschedulerApache dolphinscheduler sensitive information disclosure

Risk 46
Severity
7.5
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2023-49068: Apache DolphinScheduler: Information Leakage Vulnerability

CVE-2023-48796: Apache dolphinscheduler sensitive information disclosure

CVE-2022-45875: Apache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

Apache DolphinschedulerApache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication

Risk 22
Severity
4.3
First published (updated )

Apache DolphinschedulerApache DolphinScheduler: Remote command execution Vulnerability in script alert plugin

Risk 91
Severity
9.8
First published (updated )
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203