PYSEC-2022-280

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/apache-airflow/PYSEC-2022-280.yaml
JSON Data
https://api.osv.dev/v1/vulns/PYSEC-2022-280
Aliases
Published
2022-09-21T08:15:00Z
Modified
2023-12-06T01:02:34.882178Z
Summary
[none]
Details

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's /confirm endpoint.

References

Affected packages

PyPI / apache-airflow

Package

Name
apache-airflow
View open source insights on deps.dev
Purl
pkg:pypi/apache-airflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.3.0
Fixed
2.4.0b1

Affected versions

2.*

2.3.0
2.3.1rc1
2.3.1
2.3.2rc1
2.3.2rc2
2.3.2
2.3.3rc1
2.3.3rc2
2.3.3rc3
2.3.3
2.3.4rc1
2.3.4

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/apache-airflow/PYSEC-2022-280.yaml"