PYSEC-2022-279

See a problem?
Import Source
https://github.com/pypa/advisory-database/blob/main/vulns/apache-airflow/PYSEC-2022-279.yaml
JSON Data
https://api.test.osv.dev/v1/vulns/PYSEC-2022-279
Aliases
Published
2022-09-21T08:15:00Z
Modified
2023-12-06T00:47:32.311009Z
Summary
[none]
Details

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

References

Affected packages

PyPI / apache-airflow

Package

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.3.0
Fixed
2.4.0b1

Affected versions

2.*

2.3.0
2.3.1rc1
2.3.1
2.3.2rc1
2.3.2rc2
2.3.2
2.3.3rc1
2.3.3rc2
2.3.3rc3
2.3.3
2.3.4rc1
2.3.4