Lucene search
GoogleOSV:PYSEC-2019-216HistoryOct 30, 2019 - 10:15 p.m.
PYSEC-2019-216
2019-10-3022:15:00
Google
osv.dev
4
0.0005 Low
EPSS
Percentile
17.2%
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.
Related
veracode
veracode
Cross-Site Scripting (XSS)
2019-10-31 02:21:00
osv
osv
Apache Airflow vulnerable to XSS and local file disclosure
2019-11-22 13:45:22
cvelist
cvelist
CVE-2019-12417
2019-10-30 21:04:32
github
github
Apache Airflow vulnerable to XSS and local file disclosure
2019-11-22 13:45:22
nvd
nvd
CVE-2019-12417
2019-10-30 22:15:10
prion
prion
Arbitrary file deletion
2019-10-30 22:15:00
cve
cve
CVE-2019-12417
2019-10-30 22:15:10