Archive
2 May 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Feed
-
Medium 6.1CVE-2021-28359 EPSS 14%
Apache Airflow Reflected XSS via Origin Query Argument in URL
The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-1…