{"action":"Upgrade org.apache.dolphinscheduler:dolphinscheduler-master to 3.2.1 or later.","affected":[{"fixed":"3.2.1","introduced":"0"}],"component":"org.apache.dolphinscheduler:dolphinscheduler-master","cve_ids":["CVE-2024-23320"],"ecosystem":"Maven","epss":0.01388,"exploited":false,"fixed_versions":["3.2.1"],"ghsa_id":"GHSA-rc6h-qwj9-2c53","id":"tcs_01M5N9BG3DCV6HCTA2D58P1J1J","modified_at":"2025-02-13T19:35:10.977192Z","published_at":"2024-02-23T18:30:59Z","references":["https://osv.dev/vulnerability/GHSA-rc6h-qwj9-2c53","https://nvd.nist.gov/vuln/detail/CVE-2024-23320","https://github.com/apache/dolphinscheduler/pull/15487","https://github.com/apache/dolphinscheduler/commit/ef9ed3db55cb1647886b06c2b2c6a5cfcdccfb5c","https://github.com/apache/dolphinscheduler","https://lists.apache.org/thread/25qhfvlksozzp6j9y8ozznvjdjp3lxqq","https://lists.apache.org/thread/p7rwzdgrztdfps8x1bwx646f1mn0x6cp","https://lists.apache.org/thread/tnf99qoc6tlnwrny4t1zk6mfszgdsokm","http://www.openwall.com/lists/oss-security/2024/02/23/3"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-rc6h-qwj9-2c53","url":"https://osv.dev/vulnerability/GHSA-rc6h-qwj9-2c53"}],"summary":"Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users"}