Lucene search
+L

CVE-2024-42447 Apache Airflow Providers FAB: FAB provider 1.2.1 and 1.2.0 did not let user to logout for Airflow

🗓️ 05 Aug 2024 08:02:31Reported by apacheType 
cvelist
 cvelist
🔗 www.cve.org👁 41 Views

Insufficient session expiration vulnerability in Apache Airflow Providers FAB, affecting versions 1.2.1 and 1.2.0, preventing user logout

Related
Affected
Refs
ReporterTitlePublishedViews
Family
cgr
Chainguard
CVE-2024-42447 vulnerabilities
5 Aug 202408:15
–cgr
circl
Circl
CVE-2024-42447
5 Aug 202411:23
–circl
cnnvd
CNNVD
Apache Airflow 代码问题漏洞
5 Aug 202400:00
–cnnvd
cnvd
CNVD
Apache Airflow Access Control Error Vulnerability (CNVD-2024-39152)
14 Aug 202400:00
–cnvd
cve
CVE
CVE-2024-42447
5 Aug 202408:02
–cve
github
Github Security Blog
Apache Airflow Providers FAB Insufficient Session Expiration vulnerability
5 Aug 202409:30
–github
nvd
NVD
CVE-2024-42447
5 Aug 202408:15
–nvd
osv
OSV
CGA-222C-FW64-WPXF
25 Sep 202405:07
–osv
osv
OSV
CGA-796R-X4HC-74JQ
4 Nov 202501:20
–osv
osv
OSV
CGA-G5J6-V8QX-R46R
29 Jan 202600:49
–osv
Rows per page
[
  {
    "collectionURL": "https://pypi.org/project/apache-airflow-providers-fab/",
    "defaultStatus": "unaffected",
    "packageName": "apache-airflow-providers-fab",
    "product": "Apache Airflow Providers FAB",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThanOrEqual": "1.2.1",
        "status": "affected",
        "version": "1.2.0",
        "versionType": "semver"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

05 Aug 2024 08:02Current
CVSS 3.19.8
EPSS0.00929
SSVC
41