Apache Software Foundation Apache Airflow Providers Fab vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_airflow_providers_fab.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2024-42447CRITICALCVSS 9.8≥ 1.2.0, ≤ 1.2.12024-08-05

CVE-2024-42447 [CRITICAL] CWE-613 CVE-2024-42447: Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects A Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB. This issue affects Apache Airflow Providers FAB: 1.2.1 (when used with Apache Airflow 2.9.3) and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. * FAB provider 1.2.1 only affected Airflow 2.9.3 (earlier and later versions of A