CVE-2020-13922: Apache Dolphinscheduler

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.

Affected products

• Apache Dolphinscheduler: version 1.2.0 only; version 1.2.1 only; version 1.3.1 only

Published 2021-01-11. Last modified 2026-06-17.