2740 matches found
CVE-2022-40127: Improper Control of Generation of Code
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute arbitrary commands via manually provided runid parameter. This issue affects Apache Airflow Apache Airflow versions prior to 2.4.0...
Apache Airflow Input Validation Error Vulnerability
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow versions prior to...
Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2022-74073)
Apache Airflow is a community-created platform for programmatically authoring, scheduling, and monitoring workflows. a cross-site scripting vulnerability exists in versions of Apache Airflow prior to 2.4.2. The vulnerability is related to the affected version not properly filtering user input. Th...
Open Redirect
apacheairflow is vulnerable to open redirect. The vulnerability exists due to the getsafeurl function in views.py improperly sanitizing headers leading to open redirect in the webserver's /confirm endpoint...
Apache Airflow Cross-site Scripting vulnerability
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument...
GHSA-F9FQ-78CH-4WMJ Apache Airflow Open Redirect vulnerability
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
Apache Airflow Open Redirect vulnerability
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
CVE-2022-43982
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument...
PYSEC-2022-42971
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
PYSEC-2022-42971
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
Design/Logic Flaw
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument...
Open redirect
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
PYSEC-2022-42970
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument...
CVE-2022-43985: URL Redirection to Untrusted Site
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's /confirm endpoint...
CVE-2022-43982
CVE-2022-43982 (Apache Airflow) refers to a cross-site scripting vulnerability in versions prior to 2.4.2, where the Trigger DAG with config screen is vulnerable to XSS via the origin query parameter. The issue arises in the web UI when user-supplied data in origin is reflected back, potentially ...
CVE-2022-43982 Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the origin query argument...
CVE-2022-43985
In Apache Airflow, versions prior to 2.4.2 contain an open redirect in the webserver’s /confirm endpoint. Affected component is the Airflow webserver; root cause is an open redirect path in /confirm. The practical impact is an open redirect vulnerability (no exploitation details provided in the s...
