CVE-2022-26884
Assigner: apache
Published: 2022-10-28T00:00:00
State: PUBLISHED
title: Apache DolphinScheduler exposes files without authentication
descriptions: value: Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.
affected: vendor: Apache Software Foundation
product: Apache DolphinScheduler
versions: version: Apache DolphinScheduler
status: affected
lessThan: 2.0.6
versionType: custom
problemTypes: descriptions: type: CWE
description: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
cweId: CWE-22
x_generator: engine: Vulnogram 0.0.9
source: discovery: UNKNOWN