CVE-2022-40604

🗓️ 21 Sep 2022 07:25:11Reported by apacheType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 80 Views

Apache Airflow 2.3.0-2.3.4 URL Formatting Vulnerabilit

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2022-40604	21 Sep 202212:40	–	circl
CNNVD	Apache Airflow 格式化字符串错误漏洞	21 Sep 202200:00	–	cnnvd
CNVD	Apache Airflow Information Disclosure Vulnerability (CNVD-2022-73695)	24 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-40604 Format String Vulnerability	21 Sep 202207:25	–	cvelist
EUVD	EUVD-2022-0010	3 Oct 202520:07	–	euvd
Github Security Blog	Apache Airflow vulnerable to Use of Externally-Controlled Format String	22 Sep 202222:40	–	github
Hacker One	Internet Bug Bounty: CVE-2022-40604: Apache Airflow: Format String Vulnerability	21 Sep 202212:05	–	hackerone
NVD	CVE-2022-40604	21 Sep 202208:15	–	nvd
OSV	BIT-AIRFLOW-2022-40604 Format String Vulnerability	6 Mar 202410:57	–	osv
OSV	GHSA-5RP4-749P-VX26 Apache Airflow vulnerable to Use of Externally-Controlled Format String	22 Sep 202222:40	–	osv

NVD

Vulners

Node

apache airflowRange2.3.0–2.3.4

[
  {
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.3.0",
        "versionType": "custom"
      }
    ]
  }
]