CVE-2022-25598 | BDVDB-2026-172921 Detail

ApacheApache DolphinScheduler

Description#

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-1333 Inefficient Regular Expression Complexity

References#

https://lists.apache.org/thread/hwnw7xr969sg5nv84wz75nfr2c76fl93

Exploit#

No public exploit known

History#

Version 12022-03-30Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.