Lucene search
GitHub Advisory DatabaseGHSA-Q4P3-QW5C-MHPCHistoryJul 27, 2020 - 4:57 p.m.
Multiple stored XSS in RBAC Admin screens in Apache Airflow
2020-07-2716:57:25
CWE-79
GitHub Advisory Database
github.com
21
0.001 Low
EPSS
Percentile
22.1%
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache-airflow | lt | 1.10.11 |
Related
cve
cve
CVE-2020-11983
2020-07-17 00:15:00
osv
osv
Multiple stored XSS in RBAC Admin screens in Apache Airflow
2020-07-27 16:57:25
BIT-airflow-2020-11983
2024-03-06 11:01:07
PYSEC-2020-17
2020-07-17 00:15:00
prion
prion
Cross site scripting
2020-07-17 00:15:00
cvelist
cvelist
CVE-2020-11983
2020-07-16 23:21:30
nessus
nessus
Apache Airflow < 1.10.11 Multiple Vulnerabilities
2022-06-13 00:00:00