Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/11/28 6:14 a.m.21 views

Sensitive Information Disclosure

org.apache.dolphinscheduler: dolphinscheduler-api is vulnerable to Sensitive Information Disclosure. The vulnerability is due to not removing the sessionId in the log statement of the authenticate method in the org.apache.dolphinscheduler.api.security.impl.AbstractAuthenticator class. This can le...

7.5CVSS7AI score0.01052EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder