Lucene search
HistoryMay 14, 2024 - 4:17 p.m.
CVE-2024-32077
apache airflow
log injection
vulnerability
patch
version 2.9.1
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Users are recommended to upgrade to version 2.9.1, which fixes this issue.
Related
osv
osv
BIT-airflow-2024-32077
2024-05-24 07:15:55
Apache Airflow: XSS vulnerability in Task Instance Log/Log Details
2024-05-14 18:31:00
veracode
veracode
Cross-Site Scripting (XSS)
2024-05-17 08:58:34
vulnrichment
vulnrichment
cvelist
cvelist
github
github
Apache Airflow: XSS vulnerability in Task Instance Log/Log Details
2024-05-14 18:31:00
cve
cve
CVE-2024-32077
2024-05-14 16:17:01