CVE-2023-49068

Name of the Vulnerable Software and Affected Versions Apache DolphinScheduler versions prior to 3.2.1

Description The issue is related to the exposure of sensitive information to an unauthorized actor. Users are advised to ensure that logs are only available to trusted operators as a temporary measure.

Recommendations For versions prior to 3.2.1, upgrade to version 3.2.1 when it becomes available, as it fixes the issue. In the meantime, make sure the logs are only available to trusted operators.