未評価
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interf...
CVE-2020-13922
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- web mail-archive.com