Description (CNA)
In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache Software Foundation / Apache Airflow | affected Apache Airflow 1.10 1.10.0 to 1.10.15; affected Apache Airflow 2 before 2.2.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.