CVE-2022-25598CWE-1333

Apache DolphinScheduler user registration is vulnerable to ReDoS attacks

published March 30, 2022

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01981 · 80.4th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2022-03-30T09:20Z
EPSS history
Timeline
  • 30 MAR 09:20Z
    Apache DolphinScheduler user registration is vulnerable to ReDoS attacks
    cvelistv5