Apache Software Foundation Apache Airflow

• CVE-2023-40611 Medium 4.3 Apache Airflow Dag Runs Broken Access Control Vulnerability 1.7%
• CVE-2023-39441 Unrated Apache Airflow SMTP Provider, Apache Airflow IMAP Provider, Apache Airflow: SMTP/IMAP client components allowed MITM due to missing Certificate Validation 0.8%
• CVE-2023-37379 Unrated Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" feature 2.0%
• CVE-2023-40273 High 8.0 Session fixation in Apache Airflow web interface 1.8%
• CVE-2023-39508 High 8.8 Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges 2.6%
• CVE-2023-22888 Unrated Apache Airflow: Scheduler remote DoS 1.4%
• CVE-2023-36543 Unrated Apache Airflow: ReDoS via dags function 1.6%
• CVE-2022-46651 Unrated Apache Airflow: Security vulnerability on AirFlow Connections 1.2%
• CVE-2023-22887 Unrated Apache Airflow path traversal by authenticated user 1.8%
• CVE-2023-35908 Unrated Apache Airflow: Access to DAGs without relevant permission 1.0%
• CVE-2023-35005 Unrated Apache Airflow: Information disclosure on configuration view 1.5%
• CVE-2023-25754 Critical 9.8 Apache Airflow: Privilege escalation using airflow logs 2.3%
• CVE-2023-29247 Unrated Stored XSS on Apache Airflow 2.0%
• CVE-2023-25695 Medium 5.3 Information disclosure in Apache Airflow 1.4%
• CVE-2023-22884 Critical 9.8 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow 11.9%
• CVE-2022-40954 Medium 5.5 Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files 1.4%
• CVE-2022-41131 High 7.8 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection) 1.8%
• CVE-2022-38649 Critical 9.8 Apache Airflow Pinot provider allowed Command Injection 3.4%
• CVE-2022-40189 Critical 9.8 Apache Airlfow Pig Provider RCE 4.2%
• CVE-2022-45402 Medium 6.1 Apache Airflow: Open redirect during login 81.1%
• CVE-2022-27949 High 7.5 Apache Airflow prior to 2.3.1 may include sensitive values in rendered template 2.0%
• CVE-2022-40127 High 8.8 Apache Airflow <2.4.0 has an RCE in a bash example 85.7%
• CVE-2022-43985 Medium 6.1 Apache Airflow prior to 2.4.2 has an open redirect 1.8%
• CVE-2022-43982 Medium 6.1 Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL 1.8%
• CVE-2022-41672 Unrated Session still functional after user is deactivated 1.5%
• CVE-2022-40754 Medium 6.1 Open Redirect 1.7%
• CVE-2022-40604 High 7.5 Format String Vulnerability 2.1%
• CVE-2022-38054 Unrated Session Fixation 2.2%
• CVE-2022-38170 Unrated Overly permissive umask for daemons 0.6%
• CVE-2022-38362 Unrated Docker Provider <3.0 RCE vulnerability in example dag 2.0%
• CVE-2022-24288 Unrated Apache Airflow: RCE in example DAGs 78.4%
• CVE-2021-45229 Unrated Apache Airflow: Reflected XSS via Origin Query Argument in URL 2.6%
• CVE-2021-45230 Unrated Apache Airflow: Creating DagRuns didn't respect Dag-level permissions in the Webserver 1.7%
• CVE-2021-38540 Unrated Apache Airflow: Variable Import endpoint missed authentication check 80.9%
• CVE-2021-35936 Unrated No Authentication on Logging Server 5.5%
• CVE-2021-28359 Unrated Apache Airflow Reflected XSS via Origin Query Argument in URL 14.4%
• CVE-2021-26697 Unrated Apache Airflow: Lineage API endpoint for Experimental API missed authentication check 4.6%
• CVE-2021-26559 Unrated CWE-284 Improper Access Control on Configurations Endpoint for the Stable API 2.8%
• CVE-2020-17526 Unrated Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airf 23.9%
• CVE-2020-17513 Unrated In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. 4.4%
• CVE-2020-17511 Unrated In Airflow versions prior to 1.10.13, when creating a user using airflow CLI, the password gets logged in plain text in the Log table in Airflow Metadatase. Same happened when creating a Connection wi 2.6%
• CVE-2020-17515 Unrated The "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions prior to 1.10.13. This is same as CVE-2020-13944 but th 16.2%
• CVE-2020-9485 Unrated An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI. 2.8%
• CVE-2020-11983 Unrated An issue was found in Apache Airflow versions 1.10.10 and below. It was discovered that many of the admin management screens in the new/RBAC UI handled escaping incorrectly, allowing authenticated use 1.8%
• CVE-2020-11982 Unrated An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attack can connect to the broker (Redis, RabbitMQ) directly, it was possible to insert a malicious pay 7.2%
• CVE-2020-11981 Unrated An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resu 36.8%