3347 matches found
Apache Airflow Cross-site Scripting Vulnerability
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
GHSA-W7CP-G8V7-R54M vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-W7CP-G8V7-R54M vulnerabilities
Vulnerabilities for packages: airflow...
GHSA-W7CP-G8V7-R54M Apache Airflow Cross-site Scripting Vulnerability
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
CVE-2024-41937 vulnerabilities
Vulnerabilities for packages: airflow...
PYSEC-2024-181
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
PYSEC-2024-181
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and theuser to click the provid...
CVE-2024-41937
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
CVE-2024-41937 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2024-41937 Apache Airflow: Stored XSS Vulnerability on provider link
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
CVE-2024-41937 Apache Airflow: Stored XSS Vulnerability on provider link
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
CVE-2024-41937 Apache Airflow: Stored XSS Vulnerability on provider link
Apache Airflow, versions before 2.10.0, have a vulnerability that allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This would require the provider to be installed on the web server and the user to click the...
CVE-2024-41937
The CVE concerns Apache Airflow versions before 2.10.0, where a stored XSS vulnerability exists in the provider link workflow. If a malicious provider is installed on the web server, a user who clicks a provider documentation link can trigger script execution, enabling an attacker to perform a cr...
PT-2024-29645 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.10.0 Description: The issue allows the developer of a malicious provider to execute a cross-site scripting attack when clicking on a provider documentation link. This requires the provider to be installed on...
Apache Airflow Access Control Error Vulnerability (CNVD-2024-39152)
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An Access Control Error vulnerability exists in Apache Airflow version 1.2.1 and...
CVE-2024-42367 vulnerabilities
Vulnerabilities for packages: kserve, checkov, dask-gateway, py3-cassandra-medusa, airflow...
CVE-2024-42367 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, checkov, airflow, dask-gateway, nemo, kserve, request-1276...
GHSA-JWHX-XCG6-8XHJ vulnerabilities
Vulnerabilities for packages: kserve, checkov, dask-gateway, py3-cassandra-medusa, airflow...