Products
Apache Airflow
- 2.9.0
Source
security@apache.org
Tags
CVE-2024-32077 details
Published : May 14, 2024, 4:17 p.m.
Last Modified : May 14, 2024, 7:17 p.m.
Last Modified : May 14, 2024, 7:17 p.m.
Description
Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue.
CVSS Score
| 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
References
| URL | Source |
|---|---|
| https://github.com/apache/airflow/pull/38882 | security@apache.org |
| https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77 | security@apache.org |
This website uses the NVD API, but is not approved or certified by it.