← back
CVE-2021-27644

DolphinScheduler mysql jdbc connector parameters deserialize remote code execution

EPSS 1.9%CWE-264
In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password)

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →