Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-20244
3.5
LOWCVSS v2
Published
February 27, 2019
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
In Apache Airflow before 1.10.2, a malicious admin user could edit the state of objects in the Airflow metadata database to execute arbitrary javascript on certain page views.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows< 1.10.2NVD