GHSA-6R3P-FCVM-XH7C SSRF vulnerability in Apache Airflow

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old Flask-admin based UI were vulnerable for SSRF attack...

Server side request forgery (ssrf)

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old Flask-admin based UI were vulnerable for SSRF attack...

PYSEC-2020-20

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old Flask-admin based UI were vulnerable for SSRF attack...

PYSEC-2020-20

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old Flask-admin based UI were vulnerable for SSRF attack...

CVE-2020-17513: Server-Side Request Forgery (SSRF)

In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old Flask-admin based UI were vulnerable for SSRF attack...

discourse-sso-oidc-bridge-consideratio (>=0.1.0, <=0.1.9), flask-pyoidc (3.0.0) potentially affected by CVE-2020-26244 via oic (0.12.0)

oic PYPI version 0.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on oic and may be impacted: - discourse-sso-oidc-bridge-consideratio =0.1.0, =0.1.9 - flask-pyoidc 3.0.0 Source cves: CVE-2020-26244 Source advisory: OSV:GHSA-4FJV-PMHG-3RFG...

discourse-sso-oidc-bridge-consideratio (>=0.2.0, <=0.2.1), flask-pyoidc (>=3.1.0, <=3.6.0) +1 more potentially affected by CVE-2020-26244 via oic (1.1.2)

oic PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on oic and may be impacted: - discourse-sso-oidc-bridge-consideratio =0.2.0, =3.1.0, =0.0.9, =0.2.1 Source cves: CVE-2020-26244 Source advisory: OSV:GHSA-4FJV-PMHG-3RFG...

discourse-sso-oidc-bridge-consideratio (>=0.2.0, <=0.2.1), flask-pyoidc (>=3.1.0, <=3.6.0) +1 more potentially affected by CVE-2020-26244 via oic (1.1.2)

oic PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on oic and may be impacted: - discourse-sso-oidc-bridge-consideratio =0.2.0, =3.1.0, =0.0.9, =0.2.1 Source cves: CVE-2020-26244 Source advisory: OSV:PYSEC-2020-69...

vulhub1

It is an offensive tool for web application exploitation. The primary vulnerability targeted by this repository is not explicitly stated, but it appears to be a collection of pre-built vulnerable environments based on Docker-Compose. The repository contains various Docker-Compose files for...

vulhub

It is an offensive tool for web application security training. The primary target product/service or framework is not explicitly stated, but the repository contains various vulnerable environments based on Docker-Compose, including Flask, Apache, Nginx, and more. The vulnerability class/vector is...

vulhub

This repository is an open-source collection of pre-built vulnerable docker environments. It is an offensive tool for web application security testing. The primary CVE ID present in the context is not explicitly stated, but the repository contains various vulnerable environments, including ones...

vulhub1

It is an offensive tool for web application vulnerability exploitation. The primary CVE ID is not explicitly mentioned, but the tool appears to be designed for exploiting vulnerabilities in web applications, particularly those related to web frameworks such as Flask. The tool is likely used for...

CVE-2020-28724

Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. No pre-existing knowledge of docker is required, just execute two simple commands and you have a vulnerable environment. The target product/service or framework is docker-compose, the vulnerability class/vector is not...

vulhub

It is an open-source collection of pre-built vulnerable docker environments. The primary vulnerability class/vector targeted by Vulhub is not explicitly stated, but based on the provided code and metadata, it appears to be a collection of various vulnerabilities, including but not limited to, SQL...

vulhub

It is an offensive tool for Vulnerability Environment Based on Docker-Compose. The repository contains a collection of pre-built vulnerable docker environments, allowing users to easily create and test vulnerable environments without requiring prior knowledge of docker. The tool includes various...

vulhub2

It is an offensive tool for web application security training. The primary target product/service or framework is not explicitly stated, but the repository contains various vulnerable environments based on Docker-Compose, including Flask, Apache, Nginx, and others. The vulnerability class/vector ...

vulhub

It is an offensive tool for Docker environments. The repository contains a collection of pre-built vulnerable Docker environments, allowing users to easily set up and test various vulnerabilities without requiring prior knowledge of Docker. The environments are designed to be simple to use, with...

vulhub

It is an offensive tool for web application security training. The primary target is not explicitly stated, but based on the provided code and metadata, it appears to be a collection of vulnerable environments based on Docker-Compose. The tool includes various vulnerable environments, such as Fla...

vulhub

This is an open-source collection of pre-built vulnerable docker environments. It is a collection of docker-compose files that can be used to create vulnerable environments for testing and training purposes. The environments are designed to be easy to use and require no pre-existing knowledge of...