Description
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache DolphinScheduler | ≤ 3.2.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.dolphinscheduler:dolphinscheduler | < 3.2.2 | 3.2.2 | GHSA-m9q4-p56m-mc6q |
References
- https://lists.apache.org/thread/x1ch0x5om3srtbnp7rtsvdszho3mdrq0 vendor-advisory