Skip to content
OpenAdvisories

Archive

2 May 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Feed

  • Medium 6.1
    CVE-2021-28359 EPSS 14%

    Apache Airflow Reflected XSS via Origin Query Argument in URL

    The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-1…