Security Advisory

CVE-2024-29831

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-09 14:21:48
Last updated 2024-08-12 17:49:00
Assigner apache
State PUBLISHED

Description

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.