Apache: >> Dolphinscheduler >> 3.0.0 Security Vulnerabilities
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions.
This attack can be performed only by authenticated users which can login to DS.
CVSS Score
9.8
EPSS Score
0.025
Published
2023-01-04
Page 3