CVE-2024-29831
Apache DolphinScheduler: RCE by arbitrary js execution
Summary
Apache DolphinScheduler: RCE by arbitrary js execution
Original description
The description as published by the source.
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com