org.apache.dolphinscheduler:dolphinscheduler-api vulnerabilities (Maven)
9 vulnerabilities.
-
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access. 6.5 Medium -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: The `/v2` experimental interface lacks permission checks 9.1 Critical -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access. 6.5 Medium -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects 4.9 Medium -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure 9.8 Critical -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: Authenticated users could delete UDFs in resource center they were not authorized for 6.5 Medium -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler: Information Leakage Vulnerability 7.5 High -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler 3.0.0 to 3.1.1 python gateway has improper authentication 4.3 Medium -
org.apache.dolphinscheduler:dolphinscheduler-apiMaven Apache DolphinScheduler (incubating) Permission vulnerability 6.5 Medium