CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-27644

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)

Exploit prediction scoring system (EPSS) score

EPSS Score 0.039

EPSS Ranking 87.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.0

References

Products affected by CVE-2021-27644

Apache » Dolphinscheduler » Version: 1.0.0

cpe:2.3:a:apache:dolphinscheduler:1.0.0
Apache » Dolphinscheduler » Version: 1.0.1

cpe:2.3:a:apache:dolphinscheduler:1.0.1
Apache » Dolphinscheduler » Version: 1.0.2

cpe:2.3:a:apache:dolphinscheduler:1.0.2
Apache » Dolphinscheduler » Version: 1.0.3

cpe:2.3:a:apache:dolphinscheduler:1.0.3
Apache » Dolphinscheduler » Version: 1.0.4

cpe:2.3:a:apache:dolphinscheduler:1.0.4
Apache » Dolphinscheduler » Version: 1.0.5

cpe:2.3:a:apache:dolphinscheduler:1.0.5
Apache » Dolphinscheduler » Version: 1.1.0

cpe:2.3:a:apache:dolphinscheduler:1.1.0
Apache » Dolphinscheduler » Version: 1.2.0

cpe:2.3:a:apache:dolphinscheduler:1.2.0
Apache » Dolphinscheduler » Version: 1.2.1

cpe:2.3:a:apache:dolphinscheduler:1.2.1
Apache » Dolphinscheduler » Version: 1.3.0

cpe:2.3:a:apache:dolphinscheduler:1.3.0
Apache » Dolphinscheduler » Version: 1.3.1

cpe:2.3:a:apache:dolphinscheduler:1.3.1
Apache » Dolphinscheduler » Version: 1.3.2

cpe:2.3:a:apache:dolphinscheduler:1.3.2
Apache » Dolphinscheduler » Version: 1.3.3

cpe:2.3:a:apache:dolphinscheduler:1.3.3
Apache » Dolphinscheduler » Version: 1.3.4

cpe:2.3:a:apache:dolphinscheduler:1.3.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-27644

Products

Pricing

Contact Us