Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-29831

Apache DolphinScheduler: RCE by arbitrary js execution

Description

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache DolphinScheduler

Default version status: unaffected

  • 0 to ≤ 3.2.1affected

References