CVE-2024-32077

published 2024-05-14

CVE-2024-32077: Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.
Users are recommended to upgrade to version 2.9.1, which fixes this issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	—	—
apache_software_foundation	apache_airflow	>= 2.9.0 < 2.9.1	2.9.1

CWE-79