| CVE-2024-45784 |
Apache Airflow versions before 2.10.3 contain a vulnerability that could expose sensitive configuration variables in…
|
Non notée
|
15 nov. 2024 |
| CVE-2024-45034 |
Apache Airflow versions before 2.10.1 have a vulnerability that allows DAG authors to add local settings to the DAG…
|
Non notée
|
7 sept. 2024 |
| CVE-2024-45498 |
Example DAG: example_inlet_event_extra.py shipped with Apache Airflow version 2.10.0 has a vulnerability that allows…
|
Non notée
|
7 sept. 2024 |
| CVE-2024-39877 |
Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
|
Non notée
|
17 juil. 2024 |
| CVE-2024-39863 |
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious…
|
Non notée
|
17 juil. 2024 |
| CVE-2024-32077 |
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the…
|
Non notée
|
14 mai 2024 |
| CVE-2024-29733 |
Improper Certificate Validation vulnerability in Apache Airflow FTP Provider
|
Non notée
|
21 avr. 2024 |
| CVE-2024-29735 |
Improper Preservation of Permissions vulnerability in Apache Airflow.This issue affects Apache Airflow from 2.8.2…
|
Non notée
|
26 mars 2024 |
| CVE-2023-40273 |
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the…
|
Non notée
|
23 août 2023 |
| CVE-2023-39508 |
Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in…
|
Non notée
|
5 août 2023 |
| CVE-2023-25754 |
Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache…
|
Non notée
|
8 mai 2023 |
| CVE-2020-13927 |
Exploitée
Apache Airflow's Experimental API Authentication Bypass
|
9.8
Critique
|
10 nov. 2020 |
| CVE-2019-12398 |
In Apache Airflow before 1.10.5 when running with the "classic" UI, a malicious admin user could edit the state of…
|
Non notée
|
14 janv. 2020 |