Описание
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| airflow | itp | package |
EPSS
Процентиль: 81%
0.01563
Низкий
Связанные уязвимости
CVSS3: 6.1
nvd
почти 4 года назад
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.
CVSS3: 6.1
github
почти 4 года назад
Apache Airflow Cross-site Scripting Vulnerability
EPSS
Процентиль: 81%
0.01563
Низкий