Hi,
Severity: low

Affected version: all versions below 2.0.5.

Description:
Apache DolphinScheduler user registration interface is vulnerable to
Regular express Denial of Service (ReDoS) attacks, Apache
DolphinScheduler users should upgrade to version 2.0.5 or higher.

Solution:
Upgrade to 2.0.5 or higher.

Credit:
This issue was discovered by Zheng Wang of HIT.

-- 
Best wishes!
CalvinKirs

Reply via email to