Headline
CVE-2022-43985
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver’s /confirm endpoint.
Email display mode:
Modern rendering
Legacy rendering
Related news
GHSA-f9fq-78ch-4wmj: Apache Airflow Open Redirect vulnerability
In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.