CVE-2020-11974: Apache Dolphinscheduler

Critical severity, CVSS 9.8. EPSS: 8.1% chance of exploitation in the next 30 days.

In DolphinScheduler 1.2.0 and 1.2.1, with mysql connectorj a remote code execution vulnerability exists when choosing mysql as database.

Affected products

• Apache Dolphinscheduler: version 1.2.0 only; version 1.2.1 only

Published 2020-12-18. Last modified 2026-06-17.