Improper Input Validation... CVE-2024-23320

- AV AC AU C I A
发布: 2024-02-23
修订: 2024-02-23

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it. This issue affects Apache DolphinScheduler: until 3.2.1. Users are recommended to upgrade to version 3.2.1, which fixes the issue.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息