← Database

CVE-2022-38054

CRITICAL CVSS: 9.8 Published: 2022-09-02 Modified: 2026-06-17

Description

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver session backend was susceptible to session fixation.

Affected Platforms

Apache Airflow

Weakness Type

CWE-384, CWE-384

References