Beveiligingsadvies

CVE-2023-49299

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-30 16:27:12
Laatst bijgewerkt 2025-02-13 17:18:42
Toegewezen door apache
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9. Users are recommended to upgrade to version 3.1.9, which fixes the issue.