Description
Apache DolphinScheduler是Apache基金会的一个分布式的基于DAG可视化的工作流任务调度系统。 DolphinScheduler 1.2.0 and 1.2.1 存在安全漏洞，该漏洞源于使用mysql connectorj时，选择mysql作为数据库时存在远程代码执行漏洞。
Apache DolphinScheduler 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Apache%20DolphinScheduler/%EF%BC%88CVE-2020-11974%EF%BC%89Apache%20DolphinScheduler%20%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E/
https://github.com/hktalent/MyDocs/blob/main/Apache-DolphinScheduler%E9%AB%98%E5%8D%B1%E6%BC%8F%E6%B4%9E%EF%BC%88CVE-2020-11974%E3%80%81CVE-2020-13922%EF%BC%89.md
https://m.freebuf.com/articles/web/250305.html
https://www.secevery.com/toBugInfo?id=1826080202158153729
https://nvd.nist.gov/vuln/detail/cve-2024-43202
http://www.ol4three.com/2020/09/17/WEB/Exploit/Apache-DolphinScheduler%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C-CVE-2020-11974/
https://lists.apache.org/thread/rcbe4c248ef0c566e99fd19388a6c92aeef88167286546b675e9b1769%40%3Cdev.dolphinscheduler.apache.org%3E
https://cn-sec.com/archives/2370413.html
https://avd.aliyun.com/detail?id=AVD-2020-13922