CVE-2024-29831

CVSS v3.1 8.8 (High)

EPSS 0.04 % (10^th)

Advisories 1

NVD Status Awaiting Analysis

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
NVD Status: Awaiting Analysis
CNA: Apache Software Foundation
Published Date: 2024-08-12 13:38:18
(5 weeks ago)
Updated Date: 2024-08-12 18:35:34
(5 weeks ago)