Lucene search
Veracode Vulnerability DatabaseVERACODE:3595HistoryFeb 20, 2017 - 6:05 a.m.
Cross-site Request Forgery (CSRF)
2017-02-2006:05:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
0.001 Low
EPSS
Percentile
30.8%
Airflow is vulnerable to cross-site request forgery (CSRF). The paused and query methods are state-changing, allowing CSRF.
| CPE | Name | Operator | Version |
|---|---|---|---|
| airflow | le | 1.8.0 | |
| apache-airflow | le | 1.8.2 |
Related
osv
osv
CVE-2017-17835
2019-01-23 17:29:00
PYSEC-2019-148
2019-01-23 17:29:00
Cross-Site Request Forgery (CSRF) in Apache Airflow
2019-01-25 16:19:14
cvelist
cvelist
CVE-2017-17835
2019-01-08 00:00:00
prion
prion
Command injection
2019-01-23 17:29:00
nvd
nvd
CVE-2017-17835
2019-01-23 17:29:00
github
github
Cross-Site Request Forgery (CSRF) in Apache Airflow
2019-01-25 16:19:14
cve
cve
CVE-2017-17835
2019-01-23 17:29:00