~ / search / GHSA-jvc3-wjf6-7c6c

GHSA-jvc3-wjf6-7c6c

Apache Dolphin Scheduler has insufficiently protected credentials

Source: GitHub Advisory Database (reviewed) High CVE-2022-26885

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.dolphinscheduler:dolphinscheduler-common < 2.0.6 2.0.6

Details

As written in the advisory (Markdown source, shown as plain text).

When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher.

References

External links from the advisory. They lead to third-party sites.