Start for Free
HIGH 8.8 Maven

Apache DolphinScheduler vulnerable to Alert Script Attack

GHSA-3vcp-r62v-xpvg · CVE-2024-43115

Published · Modified

Description

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can execute any shell script server by alert script.

This issue affects Apache DolphinScheduler: before 3.2.2.

Users are recommended to upgrade to version 3.3.1, which fixes the issue.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes