CVE-2022-40604

Description

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

Related CPE's

aapacheairflow********

References

https://lists.apache.org/thread/z20x8m16fnhxdkoollv53w1ybsts687t

Vendor Advisory

https://github.com/apache/airflow/pull/26337

PatchThird Party Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io