2 matches found
GHSA-7MX5-X372-XH87 Incorrect Session Validation in Apache Airflow
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have...
8.3CVSS5.8AI score0.23336EPSS
SaveExploits0References14
PYSEC-2020-22
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A. This does not affect users who have...
7.7CVSS6.6AI score0.23336EPSS
SaveExploits0References3Affected Software1
20