Vulnerabilities > Apache > Dolphinscheduler > 1.3.1

DATE CVE VULNERABILITY TITLE RISK
2021-01-11 CVE-2020-13922 Incorrect Default Permissions vulnerability in Apache Dolphinscheduler 1.2.0/1.2.1/1.3.1
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
network
low complexity
apache CWE-276
6.5