CVE-2022-40604 Format String Vulnerability

2022-09-2107:25:11

CWE-134

apache

www.cve.org

cve

format string vulnerability

apache airflow 2.3.0

information extraction

EPSS

0.001

Percentile

50.5%

JSON

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

CNA Affected

[
  {
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.3.0",
        "versionType": "custom"
      }
    ]
  }
]