High severityNVD Advisory· Published Aug 9, 2024· Updated Aug 12, 2024
Apache DolphinScheduler: RCE by arbitrary js execution
CVE-2024-29831
Description
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.dolphinscheduler:dolphinschedulerMaven | < 3.2.2 | 3.2.2 |
Affected products
2- Range: 0
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-m9q4-p56m-mc6qghsaADVISORY
- lists.apache.org/thread/x1ch0x5om3srtbnp7rtsvdszho3mdrq0ghsavendor-advisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2024-29831ghsaADVISORY
- www.openwall.com/lists/oss-security/2024/08/09/6ghsaWEB
News mentions
0No linked articles in our index yet.