Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-45402 BIT-airflow-2022-45402EUVD-2022-0019GHSA-rg94-84xj-7gq3PYSEC-2022-42984

Apache Airflow: Open redirect during login

Published Nov 15, 2022 · Updated Apr 30, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Airflow Package: apache-airflow Ecosystem: PyPI

Description

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow unspecified – < 2.4.3 2.4.3

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow < 2.4.3 2.4.3 GHSA-rg94-84xj-7gq3

References