Headline
CVE-2022-38054
In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation.
Email display mode:
Modern rendering
Legacy rendering
Related news
GHSA-5ff8-7639-6v6g: Apache Airflow Session Fixation vulnerability
In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.