CVE-2020-9485 — Apache Software Foundation / Apache Airflow

CVE-2020-9485

Apache Software Foundation / Apache Airflow PUBLISHED

Description (CNA)

An issue was found in Apache Airflow versions 1.10.10 and below. A stored XSS vulnerability was discovered in the Chart pages of the the "classic" UI.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected 1.10.10 and below

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread.html/r7255cf0be3566f23a768e2a04b40fb09e52fcd1872695428ba9afe91%40%3Cusers.airflow.apache.org%3E

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread.html/r7255cf0be3566f23a768e2a04b40fb09e52fcd1872695428ba9afe91%40%3Cusers.airflow.apache.org%3E