← Database

CVE-2022-41672

HIGH CVSS: 8.1 Published: 2022-10-07 Modified: 2026-06-17

Description

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

Affected Platforms

Apache Airflow

Weakness Type

CWE-613, CWE-613

References