PYSEC-2022-279

Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/apache-airflow/PYSEC-2022-279.yaml
Aliases
Published
2022-09-21T08:15:00Z
Modified
2023-12-06T01:02:34.763072Z
Details

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

References

Affected packages

PyPI / apache-airflow

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.3.0
Fixed
2.4.0b1

Affected versions

2.*

2.3.0
2.3.1rc1
2.3.1
2.3.2rc1
2.3.2rc2
2.3.2
2.3.3rc1
2.3.3rc2
2.3.3rc3
2.3.3
2.3.4rc1
2.3.4