Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Yerest

#29121of 53,622
8.8Total CVSS
Vulnerabilities · 1
PT-2024-23070
8.8
2024-08-09
Apache · Apache Dolphinscheduler · CVE-2024-29831
**Name of the Vulnerable Software and Affected Versions** Apache DolphinScheduler versions prior to 3.2.2 **Description** The issue is related to improper input validation, allowing an authenticated user to execute arbitrary, unsandboxed javascript on the server. This can potentially lead to remote code execution. **Recommendations** For versions prior to 3.2.2, upgrade to version 3.2.2 to resolve the issue. If you are using the switch task plugin, please upgrade to version 3.2.2. As a temporary workaround, consider restricting access to the switch task plugin until the upgrade is applied.