cbcvebase.
CVE-2020-11974
published 2020-12-18

CVE-2020-11974: In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.

critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.

Affected

2 ranges
VendorProductVersion rangeFixed in
apachedolphinscheduler
apachedolphinscheduler