Lucene search
Veracode Vulnerability DatabaseVERACODE:37784HistoryNov 03, 2022 - 4:42 a.m.
Cross-Site Scripting (XSS)
2022-11-0304:42:37
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
cross-site scripting
apache_airflow
get_safe_url
views.py
arbitrary scripts
vulnerability
0.001 Low
EPSS
Percentile
40.2%
apache_airflow is vulnerable to cross-site scripting. The vulnerability is due to the origin query argument in the get_safe_url function of views.py which allows an attacker to inject and execute arbitrary scripts.
Related
prion
prion
Design/Logic Flaw
2022-11-02 12:15:00
osv
osv
CVE-2022-43982
2022-11-02 12:15:56
BIT-airflow-2022-43982
2024-03-06 10:56:21
PYSEC-2022-42970
2022-11-02 12:15:00
nvd
nvd
CVE-2022-43982
2022-11-02 12:15:56
cnvd
cnvd
Apache Airflow Cross-Site Scripting Vulnerability (CNVD-2022-74073)
2022-11-04 00:00:00
cvelist
cvelist
github
github
Apache Airflow Cross-site Scripting vulnerability
2022-11-02 19:00:33
cve
cve
CVE-2022-43982
2022-11-02 12:15:56