Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-76236
HistorySep 02, 2022 - 12:00 a.m.

Apache Airflow Licensing Issue Vulnerability (CNVD-2022-76236)

2022-09-0200:00:00
China National Vulnerability Database
www.cnvd.org.cn
22
apache airflow
vulnerability
session fixation

0.061 Low

EPSS

Percentile

93.6%

Apache Airflow is the Apache Foundation’s open source platform for creating, managing, and monitoring workflows. A security vulnerability exists in Apache Airflow versions 2.2.4 to 2.3.3, which stems from the vulnerability of the “database” web server session backend to session fixation. No details of the vulnerability are currently available.

CPENameOperatorVersion
apache airflow >=2.2.4,le2.3.3

0.061 Low

EPSS

Percentile

93.6%

Related for CNVD-2022-76236