Vulnerability Details CVE-2024-29831
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server. If you are using the switch task plugin, please upgrade to version 3.2.2.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 51.9%
CVSS Severity
CVSS v3 Score 8.8
Products affected by CVE-2024-29831
-
cpe:2.3:a:apache:dolphinscheduler:1.0.0
-
cpe:2.3:a:apache:dolphinscheduler:1.0.1
-
cpe:2.3:a:apache:dolphinscheduler:1.0.2
-
cpe:2.3:a:apache:dolphinscheduler:1.0.3
-
cpe:2.3:a:apache:dolphinscheduler:1.0.4
-
cpe:2.3:a:apache:dolphinscheduler:1.0.5
-
cpe:2.3:a:apache:dolphinscheduler:1.1.0
-
cpe:2.3:a:apache:dolphinscheduler:1.2.0
-
cpe:2.3:a:apache:dolphinscheduler:1.2.1
-
cpe:2.3:a:apache:dolphinscheduler:1.3.0
-
cpe:2.3:a:apache:dolphinscheduler:1.3.1
-
cpe:2.3:a:apache:dolphinscheduler:1.3.2
-
cpe:2.3:a:apache:dolphinscheduler:1.3.3
-
cpe:2.3:a:apache:dolphinscheduler:1.3.4
-
cpe:2.3:a:apache:dolphinscheduler:1.3.6
-
cpe:2.3:a:apache:dolphinscheduler:1.3.8
-
cpe:2.3:a:apache:dolphinscheduler:1.3.9
-
cpe:2.3:a:apache:dolphinscheduler:2.0.0
-
cpe:2.3:a:apache:dolphinscheduler:2.0.1
-
cpe:2.3:a:apache:dolphinscheduler:2.0.2
-
cpe:2.3:a:apache:dolphinscheduler:2.0.3
-
cpe:2.3:a:apache:dolphinscheduler:2.0.4
-
cpe:2.3:a:apache:dolphinscheduler:2.0.5
-
cpe:2.3:a:apache:dolphinscheduler:2.0.6
-
cpe:2.3:a:apache:dolphinscheduler:2.0.7
-
cpe:2.3:a:apache:dolphinscheduler:2.0.8
-
cpe:2.3:a:apache:dolphinscheduler:2.0.9
-
cpe:2.3:a:apache:dolphinscheduler:3.0.0
-
cpe:2.3:a:apache:dolphinscheduler:3.0.1
-
cpe:2.3:a:apache:dolphinscheduler:3.0.2
-
cpe:2.3:a:apache:dolphinscheduler:3.0.3
-
cpe:2.3:a:apache:dolphinscheduler:3.0.4
-
cpe:2.3:a:apache:dolphinscheduler:3.0.5
-
cpe:2.3:a:apache:dolphinscheduler:3.0.6
-
cpe:2.3:a:apache:dolphinscheduler:3.1.0
-
cpe:2.3:a:apache:dolphinscheduler:3.1.1
-
cpe:2.3:a:apache:dolphinscheduler:3.1.2
-
cpe:2.3:a:apache:dolphinscheduler:3.1.3
-
cpe:2.3:a:apache:dolphinscheduler:3.1.4
-
cpe:2.3:a:apache:dolphinscheduler:3.1.5
-
cpe:2.3:a:apache:dolphinscheduler:3.1.6
-
cpe:2.3:a:apache:dolphinscheduler:3.1.7
-
cpe:2.3:a:apache:dolphinscheduler:3.1.8
-
cpe:2.3:a:apache:dolphinscheduler:3.1.9
-
cpe:2.3:a:apache:dolphinscheduler:3.2.0
-
cpe:2.3:a:apache:dolphinscheduler:3.2.1