CVE-2022-43982 — Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL

CVE-2022-43982

Apache Airflow prior to 2.4.2 allows reflected XSS via Origin Query Argument in URL PUBLISHED

Description (CNA)

In Apache Airflow versions prior to 2.4.2, the "Trigger DAG with config" screen was susceptible to XSS attacks via the `origin` query argument.

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected unspecified before 2.4.2

CWE-79

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.