CVE-2022-25598

—

CVSS 3.1

7.5 high

EPSS

2%p79

Published

Mar 30, 2022 (Mar 30, 2022)

Modified

Jun 17, 2026

Description

Apache DolphinScheduler user registration is vulnerable to Regular express Denial of Service (ReDoS) attacks, Apache DolphinScheduler users should upgrade to version 2.0.5 or higher.

Vendors: apache
Products: dolphinscheduler
Weakness: CWE-1333
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news0 stories

No ingested article mentions this CVE yet.