Security Advisory

CVE-2017-12614

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-08-06 13:00:00

Last updated 2024-09-16 21:57:17

Assigner apache

CVSS score not scored

State PUBLISHED

Description

It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.

← Browse all CVEs View on cve.org ↗