CVE-2022-25598

2022-03-3010:15:08

Google

osv.dev

0.001 Low

EPSS

Percentile

38.9%

JSON

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

CPENameOperatorVersion
dolphinschedulereq2.0.2
dolphinschedulereq1.0.3
dolphinschedulereq2.0.3
dolphinschedulereq2.0.4
dolphinschedulereq1.3.3
dolphinschedulereq2.0.0
dolphinschedulereq1.3.1
dolphinschedulereq1.1.0-preview
dolphinschedulereq1.0.2
dolphinschedulereq1.0.4

Name	Operator	Version
dolphinscheduler	eq	2.0.2
dolphinscheduler	eq	1.0.3
dolphinscheduler	eq	2.0.3
dolphinscheduler	eq	2.0.4
dolphinscheduler	eq	1.3.3
dolphinscheduler	eq	2.0.0
dolphinscheduler	eq	1.3.1
dolphinscheduler	eq	1.1.0-preview
dolphinscheduler	eq	1.0.2
dolphinscheduler	eq	1.0.4

Rows per page:

1-10 of 131

References

lists.apache.org/thread/hwnw7xr969sg5nv84wz75nfr2c76fl93

0.001 Low

EPSS

Percentile

38.9%

JSON

Related for OSV:CVE-2022-25598