Lucene search
+L

1 matches found

OSV
OSV
added 2023/12/21 12:30 p.m.64 views

GHSA-PXCH-WR7M-RWXJ Apache Airflow has a stored cross-site scripting vulnerability

Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the...

5.4CVSS5.2AI score0.01344EPSS
SaveExploits0References7
Rows per page
Query Builder