CVE-2022-25598
published 2022-03-30CVE-2022-25598: Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to…
high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | dolphinscheduler | < 2.0.5 | 2.0.5 |
| apache_software_foundation | apache_dolphinscheduler | >= Apache DolphinScheduler < 2.0.5 | 2.0.5 |