CVE-2021-27644

—

CVSS 3.1

8.8 high

EPSS

2%p79

Published

Nov 1, 2021 (Nov 1, 2021)

Modified

Jun 17, 2026

Description

In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)

Vendors: apache
Products: dolphinscheduler
Weakness: CWE-264, CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.