Lucene search

K
osvGoogleOSV:BIT-AIRFLOW-2020-9485
HistoryMar 06, 2024 - 10:59 a.m.

BIT-airflow-2020-9485

2024-03-0610:59:54
Google
osv.dev
2
apache airflow
stored xss
classic ui
chart pages
security vulnerability

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.6%

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the “classic” UI.

CPENameOperatorVersion
airflowlt1.10.10

5.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.6%

Related for OSV:BIT-AIRFLOW-2020-9485