Severity: moderate

Affected versions:

- Apache DolphinScheduler through 3.2.1

Description:

Improper Input Validation vulnerability in Apache DolphinScheduler. An 
authenticated user can cause arbitrary, unsandboxed javascript to be executed 
on the server. If you are using the switch task plugin, please upgrade to 
version 3.2.2.

Credit:

yerest (reporter)
L0ne1y (reporter)
My Long (reporter)

References:

https://dolphinscheduler.apache.org
https://www.cve.org/CVERecord?id=CVE-2024-29831

Reply via email to