Password Disclosure

dolphinscheduler-server is vulnerable to Password Disclosure. The vulnerability exists due to improper handling of logs in the process function of LoggerRequestProcessor.java, allowing an attacker to utilize tasks to read config files, which could include the database password...

Information Disclosure

dolphinscheduler-server is vulnerable to Information Disclosure. The vulnerability exists due to improper handling of logs in the process function of LoggerRequestProcessor.java, allowing an attacker to read log files through the log server...

org.apache.dolphinscheduler:dolphinscheduler-api (>=1.2.0 <=1.2.1) potentially affected by CVE-2021-27644 via org.apache.dolphinscheduler:dolphinscheduler-server (>=1.2.0 <=1.2.1)

org.apache.dolphinscheduler:dolphinscheduler-server MAVEN version =1.2.0, =1.2.0, =1.2.1 Source cves: CVE-2021-27644 Source advisory: OSV:GHSA-93G4-3PHC-G4XW...