Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: apache
Published: 2021-01-11T09:40:19
Updated: 2021-01-11T09:40:19
Reserved: 2020-06-08T00:00:00
Link: CVE-2020-13922
JSON object: View
NVD Information
Status : Modified
Published: 2021-01-11T10:15:13.283
Modified: 2023-11-07T03:16:59.963
Link: CVE-2020-13922
JSON object: View
Redhat Information
No data.