Where
-Infinity
0

Trending

Last week
Last month
Last year

Apache DolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects

Risk 32
Severity
4.9
First published (updated )
CVE-2026-41280

oss-secApache DolphinScheduler: General user can mint admin access tokens via /access-tokens

First published (updated )
CVE-2026-49050

Apache DolphinschedulerApache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.

Risk 40
Severity
6.5
First published (updated )
CVE-2026-47340

Apache DolphinschedulerApache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.

Risk 40
Severity
6.5
First published (updated )
CVE-2026-42357

Apache DolphinschedulerApache DolphinScheduler: The `/v2` experimental interface lacks permission checks

Risk 70
Severity
9.1
First published (updated )
CVE-2026-32967
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Apache DolphinschedulerApache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure

Risk 91
Severity
9.8
First published (updated )
CVE-2026-32966

Apache DolphinschedulerApache DolphinScheduler: Deserialization of untrusted data in RPC

Risk 48
Severity
6.3
First published (updated )
CVE-2025-62233

Apache DolphinschedulerApache DolphinScheduler: Users are able to use tenants that are not defined on the platform during workflow execution.

Risk 63
Severity
8.1
First published (updated )
CVE-2026-23902

Apache DolphinschedulerApache DolphinScheduler: Users can access sensitive information through the actuator endpoint.

Risk 43
Severity
7.5
First published (updated )
CVE-2025-62188

Apache DolphinschedulerApache DolphinScheduler: Remote Code Execution Vulnerability

Risk 91
Severity
9.8
First published (updated )
CVE-2024-43202
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CVE-2024-43202: Apache DolphinScheduler: mote Code Execution Vulnerability

First published (updated )
https://seclists.org/oss-sec/2024/q3/221

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Resource File Read And Write Vulnerability

Risk 84
Severity
8.8
First published (updated )
CVE-2024-30188

Apache DolphinschedulerApache DolphinScheduler: RCE by arbitrary js execution

Risk 84
Severity
8.8
First published (updated )
CVE-2024-29831

CVE-2024-30188: Apache DolphinScheduler: source File ad And Write Vulnerability

First published (updated )
https://seclists.org/oss-sec/2024/q3/188

CVE-2024-29831: Apache DolphinScheduler: RCE by arbitrary js execution

First published (updated )
https://seclists.org/oss-sec/2024/q3/187
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.dolphinscheduler:dolphinscheduler-masterApache DolphinScheduler: Arbitrary js execution as root for authenticated users

Risk 59
Severity
8.8
EPSS
0.04%
First published (updated )
CVE-2024-23320

CVE-2024-23320: Apache DolphinScheduler: Arbitrary js execution as root for authenticated users

First published (updated )
https://seclists.org/oss-sec/2024/q1/158

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Arbitrary File Read Vulnerability

Risk 46
Severity
7.5
First published (updated )
CVE-2023-51770

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Session do not expire after password change

Risk 42
Severity
6.5
First published (updated )
CVE-2023-50270

maven/org.apache.dolphinscheduler:dolphinschedulerApache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil

Risk 54
Severity
7.3
First published (updated )
CVE-2023-49250
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.dolphinscheduler:dolphinschedulerRemote Code Execution in Apache Dolphinscheduler

Risk 91
Severity
9.8
First published (updated )
CVE-2023-49109

CVE-2023-49109: Remote Code Execution in Apache Dolphinscheduler

First published (updated )
https://seclists.org/oss-sec/2024/q1/148

CVE-2023-50270: Apache DolphinScheduler: Session do not expire after password change

First published (updated )
https://seclists.org/oss-sec/2024/q1/147

CVE-2023-51770: Apache DolphinScheduler: Arbitrary File Read Vulnerability

First published (updated )
https://seclists.org/oss-sec/2024/q1/146

CVE-2023-49250: Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil

First published (updated )
https://seclists.org/oss-sec/2024/q1/145
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

maven/org.apache.dolphinscheduler:dolphinscheduler-masterApache DolphinScheduler: Arbitrary js execute as root for authenticated users

Risk 84
Severity
8.8
First published (updated )
CVE-2023-49299

CVE-2023-49299: Apache DolphinScheduler: Arbitrary js execute as root for authenticated users

First published (updated )
https://seclists.org/oss-sec/2023/q4/347

Apache DolphinschedulerApache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for

Risk 40
Severity
6.5
First published (updated )
CVE-2023-49620

CVE-2023-49620: Apache DolphinScheduler: Authenticated users could delete UDFs in resouece center they were not authorized

First published (updated )
https://seclists.org/oss-sec/2023/q4/252

maven/org.apache.dolphinscheduler:dolphinscheduler-apiApache DolphinScheduler: Information Leakage Vulnerability

Risk 46
Severity
7.5
First published (updated )
CVE-2023-49068
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203