Aller au contenu
en Se connecter
Non notée

CVE-2019-12417 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary…

Description

A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views. This also presented a Local File Disclosure vulnerability to any file readable by the webserver process.

Produits et versions touchés

Produit Versions touchées Corrigé en
Apache Airflow Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Apache Airflow

Les 5 CVE de Apache Airflow →
CVE-2020-13927 Apache Airflow's Experimental API Authentication Bypass 9.8 Critique CVE-2020-13944 In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to… Non notée CVE-2019-0216 A malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary… Non notée CVE-2019-0229 A number of HTTP endpoints in the Airflow webserver (both RBAC and classic) did not have adequate protection and were… Non notée
Suivre cette CVE