Vulnerability CVE-2022-45402
Published: 2022-11-15

Description:
In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.

Type:

CWE-601

 (URL Redirection to Untrusted Site ('Open Redirect'))

 References:
https://github.com/apache/airflow/pull/27576
https://lists.apache.org/thread/nf4xrkoo6c81g6fdn4vj8k9x2686o9nh
Copyright 2024, cxsecurity.com

 

Back to Top