Threats affecting pkg:maven/Apache Software Foundation/org.apache.dolphinscheduler:dolphinscheduler-extract-base

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.5%	CVE-2025-62233Apache DolphinScheduler · Deserialization of Untrusted Data Medium6.3EPSS 0.5%2026-04-24CVE Database V5CVE-2025-62233 CVE-2025-62233 is a deserialization of untrusted data vulnerability in the Apache DolphinScheduler RPC module affecting versions 3.2.0 up to but not including 3.3.1. An attacker with access to Master or Worker nodes can exploit this by sending malicious RPC requests that inject harmful class types, potentially compromising the system. The issue is fixed in version 3.3.1. The vulnerability has a CVSS score of 6. EPSS 0.5%Vulnerability Apache Software Foundation CWE-502	CVE Database V5	2026-04-24

Page 1 of 1