Lucene search
Veracode Vulnerability DatabaseVERACODE:5127HistorySep 19, 2017 - 5:37 a.m.
Cross-site Scripting (XSS)
2017-09-1905:37:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
56.3%
airflow is vulnerable to cross-site scripting (XSS) attacks. These attacks are possible through the variable view, when the variable template doesn’t exist. When this happens, the input is returned to the user without being escaped.
| CPE | Name | Operator | Version |
|---|---|---|---|
| airflow | le | 1.8.0 | |
| apache-airflow | le | 1.8.2 |
Related
github
github
Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint
2022-05-14 02:57:27
cve
cve
CVE-2017-12614
2018-08-06 13:29:00
osv
osv
PYSEC-2018-45
2018-08-06 13:29:00
Apache Airflow Reflected Cross-site Scripting vulnerability in 404 Endpoint
2022-05-14 02:57:27
CVE-2017-12614
2018-08-06 13:29:00
prion
prion
Design/Logic Flaw
2018-08-06 13:29:00
cvelist
cvelist
CVE-2017-12614
2018-08-06 00:00:00
nvd
nvd
CVE-2017-12614
2018-08-06 13:29:00