PyPI/apache-dolphinscheduler CVE-2020-13922: medium 6.5, EPSS 1.75%
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
CVE-2020-13922 · published · modified · JSON