CVE-2021-45229

published 2022-02-25

CVE-2021-45229: It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

It was discovered that the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument. This issue affects Apache Airflow versions 2.2.3 and below.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	<= 2.2.3	—
apache_software_foundation	apache_airflow	>= unspecified < 2.2.4	2.2.4

CWE-79