Unrated
Apache DolphinScheduler exposes files without authentication
CVE-2022-26884
First seen on SecPulse
Original description The description as published by the source.
Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com