CVE-2020-13944 In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to…

Description

In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Apache Airflow	Versions non publiées

Autres CVE de Apache Airflow

Les 5 CVE de Apache Airflow →

CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass 9.8 Critique CVE-2019-12417 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Non notée CVE-2019-0216 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Non notée CVE-2019-0229 A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were… Non notée