4 matches found
CVE-2020-9485
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...
6.1CVSS5.7AI score0.0276EPSS
SaveExploits0References1
CVE-2020-9485
An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI...
6.1CVSS5.9AI score
SaveExploits0References1
CVE-2020-9485
CVE-2020-9485 is a stored XSS issue affecting Apache Airflow 1.10.10 and earlier, specifically in the Chart pages of the classic UI. The vulnerability is the result of unvalidated input being reflected in the UI, enabling an attacker to inject script via the affected chart rendering. The provided...
6.1CVSS5.8AI score0.0276EPSS
SaveExploits0References1Affected Software1
20