Start for Free
MEDIUM 6.5 PyPI

CVE-2020-13922

PYSEC-2021-876 · CVE-2020-13922 · GHSA-qhh5-9738-g9mx

Published · Modified

Description

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

References

Ready to move

Start Securing

Start for Free Get Demo

Free, no credit card | First findings in minutes