| CVE-2024-39877 |
Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
|
Non notée
|
17 juil. 2024 |
| CVE-2024-39863 |
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious…
|
Non notée
|
17 juil. 2024 |
| CVE-2024-25142 |
Use of Web Browser Cache Containing Sensitive Information vulnerability in Apache Airflow. Airflow did not return…
|
Non notée
|
14 juin 2024 |
| CVE-2024-32077 |
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the…
|
Non notée
|
14 mai 2024 |
| CVE-2024-31869 |
Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider…
|
Non notée
|
18 avr. 2024 |
| CVE-2024-29735 |
Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2…
|
Non notée
|
26 mars 2024 |
| CVE-2024-28746 |
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited…
|
Non notée
|
14 mars 2024 |
| CVE-2024-26280 |
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all…
|
Non notée
|
1 mars 2024 |
| CVE-2024-27906 |
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import…
|
Non notée
|
29 févr. 2024 |
| CVE-2023-50944 |
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source…
|
Non notée
|
24 janv. 2024 |
| CVE-2023-50943 |
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data…
|
Non notée
|
24 janv. 2024 |
| CVE-2023-51702 |
Since version 5.2.0, when using deferrable mode with the path of a Kubernetes configuration file for authentication, the…
|
Non notée
|
24 janv. 2024 |
| CVE-2023-48291 |
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with…
|
Non notée
|
21 déc. 2023 |
| CVE-2023-50783 |
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the…
|
Non notée
|
21 déc. 2023 |
| CVE-2023-47265 |
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded…
|
Non notée
|
21 déc. 2023 |
| CVE-2023-49920 |
Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET…
|
Non notée
|
21 déc. 2023 |
| CVE-2023-42781 |
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read…
|
Non notée
|
12 nov. 2023 |
| CVE-2023-47037 |
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions…
|
Non notée
|
12 nov. 2023 |
| CVE-2023-46215 |
Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow
|
Non notée
|
28 oct. 2023 |
| CVE-2023-46288 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Airflow.This issue affects Apache…
|
Non notée
|
23 oct. 2023 |
| CVE-2023-42663 |
Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read…
|
Non notée
|
14 oct. 2023 |
| CVE-2023-42792 |
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with…
|
Non notée
|
14 oct. 2023 |
| CVE-2023-45348 |
Apache Airflow, versions 2.7.0 and 2.7.1, is affected by a vulnerability that allows an authenticated user to retrieve…
|
Non notée
|
14 oct. 2023 |
| CVE-2023-42780 |
Apache Airflow, versions prior to 2.7.2, contains a security vulnerability that allows authenticated users of Airflow to…
|
Non notée
|
14 oct. 2023 |
| CVE-2023-40712 |
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to…
|
Non notée
|
12 sept. 2023 |