← Database

CVE-2022-40604

HIGH CVSS: 7.5 Published: 2022-09-21 Modified: 2026-06-17

Description

In Apache Airflow 2.3.0 through 2.3.4, part of a url was unnecessarily formatted, allowing for possible information extraction.

Affected Platforms

Apache Airflow

Weakness Type

CWE-134, CWE-134

References