Non notée
CVE-2019-12417 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary…
Description
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Airflow | Versions non publiées |
Autres CVE de Apache Airflow
Les 5 CVE de Apache Airflow →
CVE-2020-13927
Apache Airflow's Experimental API Authentication Bypass
9.8
Critique
CVE-2020-13944
In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to…
Non notée
CVE-2019-0216
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary…
Non notée
CVE-2019-0229
A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were…
Non notée