High
CVE-2022-40127
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 205
Reset filters
Medium
CVE-2022-43982
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.
Medium
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
High
CVE-2022-41672
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.
High
CVE-2022-40604
In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.
Medium
CVE-2022-40754
In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Medium
CVE-2022-38170
Apache Airflow exposes arbitrary file content
Critical
CVE-2022-38054
Apache Airflow Session Fixation vulnerability
Medium
CVE-2017-12614
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other bro
High
CVE-2022-24288
OS Command injection in Apache Airflow
Medium
CVE-2021-45229
Apache Airflow Cross-site Scripting Vulnerability
Medium
CVE-2021-45230
Improper Privilege Management in apache-airflow
Critical
CVE-2021-38540
Missing Authentication for Critical Function in Apache Airflow
Medium
CVE-2021-35936
Missing Authorization in Apache Airflow
Medium
CVE-2021-28359
Cross-site Scripting in Apache Airflow
Medium
CVE-2021-26697
Improper Authentication in Apache Airflow
High
CVE-2021-26559
Improper Access Control in Apache Airflow
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
Medium
CVE-2020-17513
SSRF vulnerability in Apache Airflow
Low
CVE-2020-17511
Apache Airflow logs passwords in plaintext
Medium
CVE-2020-17515
Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
Critical
Exploited in attacks
CVE-2020-13927
Authentication bypass in Apache Airflow
Medium
CVE-2020-13944
Apache Airflow Cross-site Scripting
Medium
CVE-2020-9485
Stored XSS in Apache Airflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.