Lucene search
+L

18 matches found

PyPA
PyPA
added 2026/07/13 3:35 p.m.22 views

Apache Airflow: Authenticated users can bypass the `is_safe_url` check

A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the issafeurl check, enabling redirection from a trusted Airflow domain to an attacker-controlled origin. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a defense-in-dept...

7.2CVSS6.1AI score0.00649EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder