6 matches found
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11983 via apache-airflow (>=1.8.2, <=1.10.10)
apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11983 Source advisory: OSV:GHSA-Q4P3-QW5C-MHPC...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11983 via apache-airflow (>=1.8.2, <=1.10.10)
apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11983 Source advisory: GHSA-Q4P3-QW5C-MHPC...
CVE-2020-11983
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks...
CVE-2020-11983
An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated users with appropriate permissions to create stored XSS attacks...
airflow-clickhouse-plugin (>=0.5.1, <=0.5.3), airflow-docker (>=0.1.1, <=1.1.0) +20 more potentially affected by CVE-2020-11983 via apache-airflow (>=1.8.2, <=1.10.10)
apache-airflow PYPI version =1.8.2, =0.5.1, =0.1.1, =2.4.2, =1.0.1, =1.2.1, =0.1.3a0, =0.4.0rc2, =1.7.2, =0.1.0, =0.24.11, =0.24.11, =0.24.14, =0.50.1, =0.24.14, =0.25.7 and more Source cves: CVE-2020-11983 Source advisory: MEND:CVE-2020-11983...
CVE-2020-11983
CVE-2020-11983 affects Apache Airflow versions 1.10.10 and earlier, where the RBAC UI admin screens mishandle escaping, enabling authenticated users with necessary permissions to perform stored XSS. The issue arises from improper input escaping in admin management screens of the new/RBAC UI, allo...