CVE-2024-29831
Apache DolphinScheduler: RCE by arbitrary js execution
Résumé
Apache DolphinScheduler: RCE by arbitrary js execution
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory lists.apache.org
- advisory nvd.nist.gov
- web openwall.com