Executive brief
Apache DolphinScheduler vulnerable to Alert Script Attack
Affected products
- Maven org.apache.dolphinscheduler:dolphinscheduler
Junglewise Threat Intelligence
CVE-2024-43115: Apache DolphinScheduler vulnerable to Alert Script Attack
CVE-2024-43115 · Severity: low · CVSS 3.1 · Published 2025-09-09
Technologies: org.apache.dolphinscheduler:dolphinscheduler (Maven). Vendors: Maven.
Related threats
- Apache DolphinScheduler RPC module has a Deserialization of Untrusted Data vulnerability
- Apache DolphinScheduler has an Incorrect Authorization Vulnerability
- Apache DolphinScheduler sensitive information disclosure in management endpoints
- Apache DolphinScheduler Incorrect Default Permissions Vulnerability
- Apache DolphinScheduler: RCE by arbitrary js execution