CVE-2020-11974: Critical severity apache dolphinscheduler vulnerability
Published Dec 18, 2020
·Updated
In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.
Affected Software
3 affected componentsFixes available
Apache Dolphinscheduler=1.2.0
Apache Dolphinscheduler=1.2.1
maven/org.apache.dolphinscheduler:dolphinscheduler<1.3.0
1.3.0
Event History
Dec 18, 2020
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Feb 9, 2022
Advisory Published
via GitHub·10:44 PM
Frequently Asked Questions
1
What is CVE-2020-11974?
CVE-2020-11974 is a remote code execution vulnerability in DolphinScheduler 1.2.0 and 1.2.1 when using mysql connectorj with mysql as the database.
2
What is the severity of CVE-2020-11974?
CVE-2020-11974 has a severity rating of 9.8, which is considered critical.
3
How does CVE-2020-11974 affect DolphinScheduler?
CVE-2020-11974 affects DolphinScheduler versions 1.2.0 and 1.2.1.
4
How can I fix CVE-2020-11974?
To fix CVE-2020-11974, you should upgrade to a version of DolphinScheduler that is not affected by this vulnerability.
5
Where can I find more information about CVE-2020-11974?
You can find more information about CVE-2020-11974 in the Apache DolphinScheduler mailing list threads provided in the references.