CVE-2017-17835
published 2019-01-23CVE-2017-17835: In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
high8.8CVSS 3.0
AVNACLPRNUIRSUCHIHAH
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | airflow | <= 1.8.2 | — |
| apache_software_foundation | apache_airflow | — | — |