Security Advisory

CVE-2022-43982

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-11-02 00:00:00

Last updated 2025-05-02 20:27:57

Assigner apache

State PUBLISHED

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.