ГлавнаяУязвимости → CVE-2024-29831
8.8высокая

CVE-2024-29831

Описание

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.

Затрагиваемое ПО
Apache Dolphinscheduler
CVSS
Балл8.8 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Источники
https://lists.apache.org/thread/x1ch0x5om3srtbnp7rtsvdszho3mdrq0http://www.openwall.com/lists/oss-security/2024/08/09/6