Vulnerability CVE-2022-43985
Published: 2022-11-02

Description:
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.

Type:

CWE-601

 (URL Redirection to Untrusted Site ('Open Redirect'))

 References:
https://lists.apache.org/thread/m13y9s5kw92fw9l8j4qd85h0txp4kfcq
https://github.com/apache/airflow/pull/27143
Copyright 2024, cxsecurity.com

 

Back to Top