Known vulnerabilities in Apache DolphinScheduler 2.0.0-alpha
Vendor:
Apache Foundation
Software:
Apache DolphinScheduler
Version:
2.0.0-alpha
Software CPE:
cpe:2.3:a:apache_foundation:dolphinscheduler:*:*:*:*:*:*:*:*
Website:
https://www.apache.org
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Vulnerabilities by Severity
3.4.3
3.4.2
3.4.1
3.4.0
3.3.2
3.3.1
3.2.2
3.2.1
3.1.9
3.2.0
3.1.8
2.0.9
3.0.6
3.1.7
3.1.6
3.1.5
3.0.5
3.1.4
2.0.8
3.1.3
3.0.4
3.1.2
3.0.3
3.0.2
3.1.1
2.0.7
3.1.0
3.0.1
3.0.0
2.0.6
2.0.5
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.3.0
1.1.0
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
2.0.0-alpha
1.3.9
1.3.8
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.2.1
1.2.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU86652 - Improper Certificate Validation CVE-2023-49250 |
CWE-295 | Medium | 3.2.1 | 20.02.2024 |
SB2024022044 |
||
| #VU86651 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-51770 |
CWE-22 | Medium | 3.2.1 | 20.02.2024 |
SB2024022044 |
||
| #VU86650 - Session Fixation CVE-2023-50270 |
CWE-384 | Low | 3.2.1 | 20.02.2024 |
SB2024022044 |
||
| #VU69763 - Unprotected Storage of Credentials CVE-2022-26885 |
CWE-256 | Low | 2.0.6 | 30.11.2022 |
SB2022113037 |
||
| #VU69762 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-45462 |
CWE-78 | Medium | 2.0.6 | 30.11.2022 |
SB2022113037 |