1 matches found
Sensitive Information Disclosure
org.apache.dolphinscheduler: dolphinscheduler-api is vulnerable to Sensitive Information Disclosure. The vulnerability is due to not removing the sessionId in the log statement of the authenticate method in the org.apache.dolphinscheduler.api.security.impl.AbstractAuthenticator class. This can le...
7.5CVSS7AI score0.01052EPSS
SaveExploits0References3Affected Software1
20