← All credits
L0ne1y
22 vulnerability records and advisories credit this contributor.
CVE-2024-36265
Apache Submarine Server Core: authorization bypass
CVE-2024-43166
Incorrect Default Permissions vulnerability in Apache DolphinScheduler.
This issue affects Apache DolphinScheduler: before 3.2.2.
Users are recommended to upgrade to version 3.3.1, which fixes the issue.
CVE-2024-43115
Apache DolphinScheduler: Alert Script Attack
CVE-2024-26579
Apache Inlong JDBC Vulnerability
CVE-2023-49566
Apache Linkis DataSource: JDBC Datasource Module with DB2 has JNDI Injection vulnerability
CVE-2024-36264
Apache Submarine Commons Utils: default secret
CVE-2023-41916
Apache Linkis DataSource: DatasourceManager module has a JDBC parameter judgment logic vulnerability that allows for arbitrary file reading
CVE-2024-45537
Apache Druid: Users can provide MySQL JDBC properties not on allow list
CVE-2024-36448
Apache IoTDB Workbench: SSRF Vulnerability (EOL)
CVE-2024-30188
Apache DolphinScheduler: Resource File Read And Write Vulnerability