CVE-2023-49299 (published 2023-12-30T16:27:12.045Z)
Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.This issue affects Apache DolphinScheduler: until 3.1.9.

Users are recommended to upgrade to version 3.1.9, which fixes the issue.


Affected products: Vendor: Apache Software Foundation
Product: Apache DolphinScheduler
Versions: 0