CVE-2022-43982 Information

Description

In Apache Airflow versions prior to 2.4.2 the \Trigger DAG with config\ screen was susceptible to XSS attacks via the origin query argument.

Reference

https://lists.apache.org/thread/vqnvdrfsw9z7v7c46qh3psjgr7wy959l https://github.com/apache/airflow/pull/27143

Share on: