Uncontrolled Resource Consumption in Apache DolphinScheduler

GHSA-qg5x-66hp-cw5p · CVE-2022-25598 · PYSEC-2022-176

Published Mar 31, 2022 · Modified Feb 16, 2024

Description

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks. Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2022-25598
PACKAGE https://github.com/apache/dolphinscheduler
WEB https://github.com/pypa/advisory-database/tree/main/vulns/apache-dolphinscheduler/PYSEC-2022-176.yaml
WEB https://lists.apache.org/thread/hwnw7xr969sg5nv84wz75nfr2c76fl93

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes