CVE-2022-40754 Open Redirect

2022-09-2107:25:12

CWE-601

apache

www.cve.org

cve-2022-40754

open redirect

apache airflow

EPSS

0.002

Percentile

54.6%

JSON

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver’s /confirm endpoint.

CNA Affected

[
  {
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "2.3.0",
        "versionType": "custom"
      }
    ]
  }
]