CVE-2021-27644

Description

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)

References

https://github.com/advisories/GHSA-93g4-3phc-g4xw

https://lists.apache.org/thread.html/r35d6acf021486a390a7ea09e6650c2fe19e72522bd484791d606a6e6%40%3Cdev.dolphinscheduler.apache.org%3E

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-2328

http://www.openwall.com/lists/oss-security/2021/11/01/3

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS