Approved changes feed: RSS · Atom

cpe:2.3:a:apache:dolphinscheduler:1.3.1:*:*:*:*:*:*:*

part: a version: 1.3.1 update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductDolphinscheduler (e50278c8-ec59-51a3-8889-26ed41328497)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897107
pkg:docker/apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897108
pkg:github/apache/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897109
pkg:maven/org.apache.dolphinscheduler/dolphinscheduler purl2cpe 2026-06-01 10:14:26.897111

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13922 vulnerable 2026-06-08 05:18:01.378508 Apache DolphinScheduler (incubating) Permission vulnerability
Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
Published: 2021-01-11T09:40:19.000Z
Updated: 2025-02-13T16:27:28.158Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.