In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2022-11-15T00:00:00

Updated: 2024-08-03T14:09:57.045Z

Reserved: 2022-11-14T00:00:00

Link: CVE-2022-45402

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-11-15T09:15:09.447

Modified: 2022-11-17T21:24:24.843

Link: CVE-2022-45402

cve-icon Redhat

No data.