CVE-2020-9485

published 2020-07-17

CVE-2020-9485: An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	<= 1.10.10	—
apache_software_foundation	apache_airflow	—	—

CWE-79