title: Apache DolphinScheduler config file read by task risk
description: When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher.
problem types: config file read by task risk
affected:
{
vendor: Apache Software Foundation
product: Apache DolphinScheduler
versions:
version: Apache DolphinScheduler, status: affected, lessThan: 2.0.6, versionType: custom
}
metrics:
other: [
type: unknown
content: {'other': 'important'}
]