CVE-2019-12417

🗓️ 30 Oct 2019 22:10:15Reported by [email protected]Type

A malicious admin user could execute arbitrary javascript and disclose local files in Airflow metadata databas

Reporter	Title	Published	Views	Family All 7
OSV	Apache Airflow vulnerable to XSS and local file disclosure	22 Nov 201913:45	–	osv
OSV	PYSEC-2019-216	30 Oct 201922:15	–	osv
Veracode	Cross-Site Scripting (XSS)	31 Oct 201902:21	–	veracode
Cvelist	CVE-2019-12417	30 Oct 201921:04	–	cvelist
Github Security Blog	Apache Airflow vulnerable to XSS and local file disclosure	22 Nov 201913:45	–	github
CVE	CVE-2019-12417	30 Oct 201922:15	–	cve
Prion	Arbitrary file deletion	30 Oct 201922:15	–	prion

Nvd

Node

apache airflowRange≤1.10.5

Source	Link
lists	www.lists.apache.org/thread.html/f3aa5ff9c7cdb5424b6463c9013f6cf5db83d26c66ea77130cbbe1bc%40%3Cusers.airflow.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2019 22:15Current

5.5Medium risk

Vulners AI Score5.5

CVSS23.5

CVSS34.8

EPSS0.001

CWE-79