CVE-2017-12614

It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack

published August 6, 2018

CVSS
—
EPSS
2%
Percentile
80.8
In the wild
Unconfirmed
What it is

It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02020 · 80.8th percentile
Published
2018-08-06T13:00Z
EPSS history
Timeline
  • 06 AUG 13:00Z
    It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack
    cvelistv5