https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T21:57:22.487583+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-23320 CVE-2024-23320 — Apache DolphinScheduler: Arbitrary js execution as root for authenticated users 2026-10-19T21:57:22.489026+00:00

Affected: Apache Software Foundation Apache DolphinScheduler, apache dolphinscheduler

Improper Input Validation vulnerability in Apache DolphinScheduler. An authenticated user can cause arbitrary, unsandboxed javascript to be executed on the server.

This issue is a legacy of CVE-2023-49299. We didn't fix it completely in CVE-2023-49299, and we added one more patch to fix it.

This issue affects Apache DolphinScheduler: until 3.2.1.

Users are recommended to upgrade to version 3.2.1, which fixes the issue.