Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-38054
9.8
CRITICALCVSS v3
Published
September 2, 2022
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows>= 2.2.4, <= 2.3.3NVD