Lucene search
PRIOn knowledge basePRION:CVE-2021-28359HistoryMay 02, 2021 - 8:15 a.m.
Design/Logic Flaw
2021-05-0208:15:00
PRIOn knowledge base
www.prio-n.com
9
The “origin” parameter passed to some of the endpoints like ‘/trigger’ was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336).
Related
cvelist
cvelist
CVE-2021-28359 Apache Airflow Reflected XSS via Origin Query Argument in URL
2021-05-02 07:55:12
CVE-2020-17515
2020-12-11 13:40:12
CVE-2020-13944
2020-09-17 14:01:40
github
github
Cross-site Scripting in Apache Airflow
2021-06-18 18:43:42
Apache Airflow Cross-site scripting due to incomplete fix for CVE-2020-13944
2021-04-20 16:40:14
Apache Airflow Cross-site Scripting
2021-06-18 18:29:54
osv
osv
CVE-2021-28359
2021-05-02 08:15:06
BIT-airflow-2021-28359
2024-03-06 10:59:26
Cross-site Scripting in Apache Airflow
2021-06-18 18:43:42
nvd
nvd
cve
cve
prion
prion
Design/Logic Flaw
2020-12-11 14:15:00
Design/Logic Flaw
2020-09-17 14:15:00
Design/Logic Flaw
2021-02-15 13:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-12-14 03:45:11
Cross-Site Scripting (XSS)
2021-05-03 04:59:04
Cross-Site Scripting (XSS)
2020-09-18 05:26:19
fortinet
fortinet
Multiple vulnerabilities in Apache Airflow
2022-06-07 00:00:00
cnvd
cnvd
Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2022-09242)
2021-06-29 00:00:00
nessus
nessus
Fedora 32 : mingw-python3 (2021-309bc2e727)
2021-03-15 00:00:00
SUSE SLED15 / SLES15 Security Update : python (SUSE-SU-2021:0768-1)
2021-03-12 00:00:00
Fedora 33 : mingw-python3 (2021-b76ede8f4d)
2021-03-15 00:00:00
redhatcve
redhatcve
CVE-2021-23336
2021-02-15 20:05:02
openvas
openvas
fedora
fedora
[SECURITY] Fedora 34 Update: python-django-3.1.7-1.fc34
2021-03-19 20:27:58
[SECURITY] Fedora 33 Update: mingw-python3-3.9.2-1.fc33
2021-03-15 01:19:58
[SECURITY] Fedora 34 Update: mingw-python3-3.9.2-2.fc34
2021-03-19 20:28:38
debiancve
debiancve
CVE-2021-23336
2021-02-15 13:15:12
debian
debian
[SECURITY] [DLA 2569-1] python-django security update
2021-02-19 16:24:07
[SECURITY] [DLA 2628-1] python2.7 security update
2021-04-17 19:31:24
[SECURITY] [DLA 2619-1] python3.5 security update
2021-04-05 16:08:19
alpinelinux
alpinelinux
CVE-2021-23336
2021-02-15 13:15:12
mageia
mageia
Updated python and python3 packages fix security vulnerability
2021-04-02 13:16:21
Updated python-django package fixes a security vulnerability
2021-03-15 00:20:42
suse
suse
Security update for python (moderate)
2021-03-17 00:00:00
cbl_mariner
cbl_mariner
CVE-2021-23336 affecting package python3 3.7.9-4
2021-07-08 21:56:42
CVE-2021-23336 affecting package python2 for versions less than 2.7.18-8
2022-04-09 06:51:57
CVE-2021-23336 affecting package python2 2.7.18-14
2021-04-06 23:50:12
ubuntu
ubuntu
Django vulnerability
2021-02-22 00:00:00
archlinux
archlinux
[ASA-202102-28] python-django: url request injection
2021-02-20 00:00:00
[ASA-202102-37] python: multiple issues
2021-02-27 00:00:00
ubuntucve
ubuntucve
CVE-2021-23336
2021-02-15 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2021-0204
2021-03-05 00:00:00
Moderate Photon OS Security Update - PHSA-2021-3.0-0204
2021-03-05 00:00:00
altlinux
altlinux
amazon
amazon
Medium: python36
2021-05-14 16:53:00
Low: python34
2021-05-20 21:12:00
Medium: python3
2021-05-20 16:15:00
gentoo
gentoo
Python: Multiple vulnerabilities
2021-04-30 00:00:00
almalinux
almalinux
Moderate: python3 security update
2021-05-18 05:42:46
oraclelinux
oraclelinux
python3 security update
2021-05-25 00:00:00
redhat
redhat
(RHSA-2021:1633) Moderate: python3 security update
2021-05-18 05:42:46