p PatchFirst

CVE-2022-40754

CVE-2022-40754 · Open Redirect

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.

CVSS 6.1 · Medium · EPSS 1.8% · Fix available

Published
Updated

Stack: python

Affected products and versions

  • apache airflow

    Versions
    • ≥ unspecified, < 2.4.0: Affected (custom)
    • ≥ 2.3.0, < unspecified: Affected (custom)

    Update to 2.4.0

  • apache-airflow PyPI

    Versions
    • 2.3.0
    • 2.3.1
    • 2.3.1rc1
    • 2.3.2
    • 2.3.2rc1
    • 2.3.2rc2
    • 2.3.3
    • 2.3.3rc1
    • 2.3.3rc2
    • 2.3.3rc3
    • 2.3.4
    • 2.3.4rc1
    • 2.4.0b1
    Affected ranges
    • ECOSYSTEM: ≥ 2.3.0, < 2.4.0rc1

    Update to 2.4.0rc1

  • apache-airflow PyPI

    Versions
    • 2.3.0
    • 2.3.1
    • 2.3.1rc1
    • 2.3.2
    • 2.3.2rc1
    • 2.3.2rc2
    • 2.3.3
    • 2.3.3rc1
    • 2.3.3rc2
    • 2.3.3rc3
    • 2.3.4
    • 2.3.4rc1
    Affected ranges
    • ECOSYSTEM: ≥ 2.3.0, < 2.4.0b1

    Update to 2.4.0b1

Original sources

Check your server →