Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-69471
HistorySep 24, 2022 - 12:00 a.m.

Apache Airflow Open Redirect Vulnerability

2022-09-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
apache airflow
open source
workflows
web server
vulnerability
phishing
attacks
apache foundation
version 2.3.0 - 2.3.4
redirection

EPSS

0.002

Percentile

54.6%

Apache Airflow is an open source platform for creating, managing and monitoring workflows from the Apache Foundation. Apache Airflow versions 2.3.0 to 2.3.4 have an open redirection vulnerability, which originates from the /confirm port of the web server does not do a reasonable job on the target jump, an attacker can use the vulnerability to redirect users to malicious websites to engage in phishing and other attacks.

EPSS

0.002

Percentile

54.6%