BIT-airflow-2023-29247

vendorUSosv

Stored XSS on Apache Airflow

view advisory published 2024-03-06Licence: per source

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-29247USmedium5.4—
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan