| CVE-2023-40611 |
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view…
|
Not rated
|
Sep 12, 2023 |
| CVE-2023-39441 |
Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0…
|
Not rated
|
Aug 23, 2023 |
| CVE-2023-37379 |
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an…
|
Not rated
|
Aug 23, 2023 |
| CVE-2023-40273 |
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the…
|
Not rated
|
Aug 23, 2023 |
| CVE-2023-39508 |
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in…
|
Not rated
|
Aug 5, 2023 |
| CVE-2023-22888 |
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-36543 |
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the…
|
Not rated
|
Jul 12, 2023 |
| CVE-2022-46651 |
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-22887 |
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-35908 |
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG…
|
Not rated
|
Jul 12, 2023 |
| CVE-2023-35005 |
In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations
|
Not rated
|
Jun 19, 2023 |
| CVE-2023-25754 |
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache…
|
Not rated
|
May 8, 2023 |
| CVE-2023-29247 |
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0
|
Not rated
|
May 8, 2023 |
| CVE-2023-25695 |
Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache…
|
Not rated
|
Mar 15, 2023 |
| CVE-2023-22884 |
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software…
|
Not rated
|
Jan 21, 2023 |
| CVE-2022-41131 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
|
Not rated
|
Nov 22, 2022 |
| CVE-2022-40954 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
|
Not rated
|
Nov 22, 2022 |
| CVE-2022-40189 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
|
Not rated
|
Nov 22, 2022 |
| CVE-2022-38649 |
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
|
Not rated
|
Nov 22, 2022 |
| CVE-2022-45402 |
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint
|
6.1
Medium
|
Nov 15, 2022 |
| CVE-2022-40127 |
A vulnerability in Example Dags of Apache Airflow allows an attacker with UI access who can trigger DAGs, to execute…
|
Not rated
|
Nov 14, 2022 |
| CVE-2022-27949 |
A vulnerability in UI of Apache Airflow allows an attacker to view unmasked secrets in rendered template values for…
|
Not rated
|
Nov 14, 2022 |
| CVE-2022-43985 |
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint
|
6.1
Medium
|
Nov 2, 2022 |
| CVE-2022-43982 |
In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the…
|
6.1
Medium
|
Nov 2, 2022 |
| CVE-2022-41672 |
In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being…
|
Not rated
|
Oct 7, 2022 |