CVE-2024-29831

—

CVSS 3.1

8.8 high

EPSS

1%p66

Published

Aug 12, 2024 (Aug 12, 2024)

Modified

Jun 17, 2026

Description

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.

Vendors: apache
Products: dolphinscheduler
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.