In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2022-11-02T00:00:00

Updated: 2024-08-03T13:47:04.593Z

Reserved: 2022-10-28T00:00:00

Link: CVE-2022-43985

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-11-02T12:15:56.403

Modified: 2022-11-03T13:52:31.063

Link: CVE-2022-43985

cve-icon Redhat

No data.