Filter
AND
pip/apache-airflowApache Airflow: Ignored Airflow Permissions
8.1
EPSS
0.04%
First published (updated )
pip/apache-airflowApache Airflow Celery provider, Apache Airflow: Sensitive information logged as clear text when rediss, amqp, rpc protocols are used as Celery result backend
7.5
First published (updated )
Apache AirflowApache Airflow Command Injection
First published (updated )
Apache AirflowApache Airflow path traversal by authenticated user
7
First published (updated )
Apache AirflowApache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowSession fixation in Apache Airflow web interface
8
First published (updated )
Apache AirflowApache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature
8.1
First published (updated )
pip/apache-airflowApache Airflow: DAG Author Code Execution possibility in airflow-scheduler
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/apache-airflowApache Airflow: Potential XSS Vulnerability
8.1
First published (updated )
Apache AirflowApache Airflow: Potential pickle deserialization vulnerability in XComs
7.5
First published (updated )
Apache AirflowIncorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default conf…
7.7
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
pip/apache-airflowApache Airflow <2.4.0 has an RCE in a bash example
8.8
First published (updated )
Apache AirflowApache Airflow prior to 2.3.1 may include sensitive values in rendered template
7.5
First published (updated )
Apache AirflowSession still functional after user is deactivated
8.1
First published (updated )
Apache AirflowThe LDAP auth backend (airflow.contrib.auth.backends.ldap_auth) prior to Apache Airflow 1.10.1 was m…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Apache AirflowApache Airflow Hive Provider vulnerability (command injection via hive_cli connection)
7.8
First published (updated )