PT-2022-27052 · Apache · Apache Airflow

CVE-2022-43982

Published

2022-11-02

Updated

2024-03-06

CVSS v3.1

6.1

Medium

Vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.4.2

Description The issue concerns an XSS attack via the origin query argument in the "Trigger DAG with config" screen.

Recommendations For versions prior to 2.4.2, update to version 2.4.2 or later to resolve the issue.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾

BIT-AIRFLOW-2022-43982

CVE-2022-43982

GHSA-H63R-9XXF-F2C7

PYSEC-2022-42970

Apache Airflow