Apache Airflow vulnerable to XSS and local file disclosure

🗓️ 22 Nov 2019 13:22:45Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Apache Airflow vulnerability to XSS and local file disclosur

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2019-12417	30 Oct 201921:04	–	cvelist
Veracode	Cross-Site Scripting (XSS)	31 Oct 201902:21	–	veracode
Github Security Blog	Apache Airflow vulnerable to XSS and local file disclosure	22 Nov 201913:45	–	github
NVD	CVE-2019-12417	30 Oct 201922:15	–	nvd
OSV	PYSEC-2019-216	30 Oct 201922:15	–	osv
CVE	CVE-2019-12417	30 Oct 201922:15	–	cve
Prion	Arbitrary file deletion	30 Oct 201922:15	–	prion

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-12417
github	www.github.com/apache/airflow/commit/fed0d0ee10275c5b0fccdb44a077dfa1f364acb6
lists	www.lists.apache.org/thread.html/f3aa5ff9c7cdb5424b6463c9013f6cf5db83d26c66ea77130cbbe1bc@%3Cusers.airflow.apache.org%3E

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Nov 2019 13:45Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.001