CVE-2020-13922 | BDVDB-2026-147176 Detail

ApacheApache DolphinScheduler

Description#

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-264 Permissions, Privileges, and Access Controls

References#

https://www.mail-archive.com/announce%40apache.org/msg06076.html

Exploit#

No public exploit known

History#

Version 12021-01-11Record published in the CVE List.
Version 22025-02-13Most recent update recorded in the CVE List.