CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-45875
Severity
CRITICAL
CVSS
9.8
EPSS
2.55%
Apache
Original NVD Description
Improper validation of script alert plugin parameters in Apache DolphinScheduler to avoid remote command execution vulnerability. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. This attack can be performed only by authenticated users which can login to DS.
Related CVEs
Other vulnerabilities affecting the same vendor(s)