Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface.
Published January 11, 2021.
Apache Dolphinscheduler
