Unsandboxed JavaScript Execution Vulnerability in Apache DolphinScheduler
CVE-2024-23320

8.8HIGH

Key Information:

Vendor: Apache
Status: Apache Dolphinscheduler
Vendor: CVE Published:; 23 February 2024

What is CVE-2024-23320?

An input validation vulnerability discovered in Apache DolphinScheduler allows authenticated users to execute arbitrary, unsandboxed JavaScript on the server. This flaw stems from a prior vulnerability (CVE-2023-49299) that was not fully resolved. Affected users are encouraged to upgrade to version 3.2.1, which implements a comprehensive patch to address this issue.