Maven/org.apache.dolphinscheduler:dolphinscheduler-api CVE-2020-13922: medium 6.5, EPSS 1.75%

Incorrect Default Permissions in Apache DolphinScheduler

Action: Upgrade org.apache.dolphinscheduler:dolphinscheduler-api to 1.3.2 or later.

Affected

Fixed versions

Sources

• osv: GHSA-qhh5-9738-g9mx
• https://nvd.nist.gov/vuln/detail/CVE-2020-13922
• https://github.com/apache/incubator-dolphinscheduler/commit/b8a9e2e00f2f207ae60c913a7173b59405ff95f1
• https://github.com/apache/incubator-dolphinscheduler
• https://github.com/pypa/advisory-database/tree/main/vulns/apache-dolphinscheduler/PYSEC-2021-876.yaml
• https://www.mail-archive.com/announce%40apache.org/msg06076.html
• https://www.mail-archive.com/announce@apache.org/msg06076.html

CVE-2020-13922 · published 2022-02-09T22:26:32Z · modified 2024-11-23T05:42:52.218285Z · JSON