CVE-2023-29247 Stored XSS on Apache Airflow

2023-05-0809:01:40

CWE-79

apache

www.cve.org

cve-2023-29247

stored xss

apache airflow

task instance vulnerability

0.001 Low

EPSS

Percentile

41.6%

JSON

Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.6.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]