CVE-2017-17835

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow

published January 23, 2019

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02042 · 80.9th percentile
Published
2019-01-23T17:00Z
EPSS history
Timeline
  • 23 JAN 17:00Z
    In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow
    cvelistv5