Non notée
CVE-2019-0229 A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were…
Description
A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were vulnerable to cross-site request forgery attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Airflow | Versions non publiées |
Références
- lists.apache.org lists.apache.org
- [oss-security] 20190410 CVE-2019-0216, CVE-2019-0229 vulnerabilities affecting Apache Airflow <= 1.10.2 webserver component www.openwall.com
- 107869 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Apache Airflow
Les 5 CVE de Apache Airflow →
CVE-2020-13927
Apache Airflow's Experimental API Authentication Bypass
9.8
Critique
CVE-2020-13944
In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to…
Non notée
CVE-2019-12417
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary…
Non notée
CVE-2019-0216
A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary…
Non notée