Cross-Site Scripting (XSS)

2019-02-2801:32:50

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

EPSS

0.002

Percentile

52.2%

JSON

apache-airflow is vulnerable to cross-site scripting (XSS). An admin user is able to inject arbitrary Javascript into a victim’s browser through the modification of state of objects in the metadata database, which would execute on certain page views.