Executive brief
Apache DolphinScheduler: RCE by arbitrary js execution
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler
Junglewise Threat Intelligence
CVE-2024-29831: Apache DolphinScheduler: RCE by arbitrary js execution
CVE-2024-29831 · Severity: low · CVSS 3.1 · Published 2024-08-12
Technologies: org.apache.dolphinscheduler:dolphinscheduler (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
- Apache DolphinScheduler has an Incorrect Authorization Vulnerability
- Apache DolphinScheduler sensitive information disclosure in management endpoints
- Apache DolphinScheduler vulnerable to Alert Script Attack
- Apache DolphinScheduler Incorrect Default Permissions Vulnerability