← Database

CVE-2021-45230

MEDIUM CVSS: 6.5 Published: 2022-01-20 Modified: 2026-06-17

Description

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

Affected Platforms

Apache Airflow

Weakness Type

NVD-CWE-noinfo

References