title: Apache DolphinScheduler exposes files without authentication
description: Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
vendor: Apache Software Foundation
product: Apache DolphinScheduler
versions:
version: Apache DolphinScheduler, status: affected, lessThan: 2.0.6, versionType: custom
}