CVE-2022-43985 — Apache Airflow prior to 2.4.2 has an open redirect

CVE-2022-43985

Apache Airflow prior to 2.4.2 has an open redirect PUBLISHED

Description (CNA)

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected unspecified before 2.4.2

CWE-601

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.