Improper Input Validation Affecting org.apache.dolphinscheduler:dolphinscheduler-master package, versions [,3.1.9)
Threat Intelligence
EPSS
0.15% (53rd
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-JAVA-ORGAPACHEDOLPHINSCHEDULER-6143549
- published 4 Jan 2024
- disclosed 30 Dec 2023
- credit Eluen Siebene
Introduced: 30 Dec 2023
CVE-2023-49299 Open this link in a new tabHow to fix?
Upgrade org.apache.dolphinscheduler:dolphinscheduler-master to version 3.1.9 or higher.
Overview
Affected versions of this package are vulnerable to Improper Input Validation. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.
References
CVSS Scores
version 3.1