Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-43982

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-h63r-9xxf-f2c7

Apache Airflow Cross-site Scripting vulnerability In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

gitlab/pypi/apache-airflow/CVE-2022-43982

Apache Airflow Cross-site Scripting vulnerability In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

pypa/apache-airflow/PYSEC-2022-42970

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

pysec/PYSEC-2022-42970

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.