CVE-2022-45402

URL Redirection to Untrusted Site ('Open Redirect') in pypi/apache-airflow

Identifiers

CVE-2022-45402

Package Slug

pypi/apache-airflow

Vulnerability

URL Redirection to Untrusted Site ('Open Redirect')

Description

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint.

Affected Versions

All versions before 2.4.3

Solution

Upgrade to version 2.4.3 or above.

Last Modified

2022-11-18

source