Description
Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.
Remediation
References
http://www.openwall.com/lists/oss-security/2022/10/28/2
https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2htyyb9c
Related Vulnerabilities
CVE-2018-1294 Vulnerability in maven package org.apache.commons:commons-email
CVE-2020-7631 Vulnerability in npm package diskusage-ng
CVE-2019-19771 Vulnerability in npm package bcion
CVE-2020-36604 Vulnerability in npm package @hapi/hoek
CVE-2020-28472 Vulnerability in maven package org.webjars.bower:aws-sdk