Описание
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| airflow | itp | package |
Связанные уязвимости
CVSS3: 7.5
nvd
больше 3 лет назад
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
CVSS3: 7.5
github
больше 3 лет назад
Apache Airflow vulnerable to Use of Externally-Controlled Format String