Lucene search
Veracode Vulnerability DatabaseVERACODE:21796HistoryOct 31, 2019 - 2:21 a.m.
Cross-Site Scripting (XSS)
2019-10-3102:21:00
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
0.0005 Low
EPSS
Percentile
17.2%
apache-airflow is vulnerable to cross-site scripting (XSS). An administrative user is able to edit the state of objects in the metadata database to contain malicious Javascript, which will execute in a victim’s browser when rendered. This vulnerability also allows reading of arbirary files permitted by the web server process worker.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache-airflow | le | 1.10.5 |
Related
nvd
nvd
CVE-2019-12417
2019-10-30 22:15:10
prion
prion
Arbitrary file deletion
2019-10-30 22:15:00
osv
osv
Apache Airflow vulnerable to XSS and local file disclosure
2019-11-22 13:45:22
PYSEC-2019-216
2019-10-30 22:15:00
cvelist
cvelist
CVE-2019-12417
2019-10-30 21:04:32
github
github
Apache Airflow vulnerable to XSS and local file disclosure
2019-11-22 13:45:22
cve
cve
CVE-2019-12417
2019-10-30 22:15:10