Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-45229
6.1
MEDIUMCVSS v3
Published
February 25, 2022
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows<= 2.2.3NVD