Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-12417
HistoryOct 30, 2019 - 10:15 p.m.

Arbitrary file deletion

2019-10-3022:15:00
PRIOn knowledge base
www.prio-n.com
3

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

CPENameOperatorVersion
airflowle1.10.5

5.4 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

Related for PRION:CVE-2019-12417