high8.8
CVE-2017-17835
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Impact
In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Airflow | through 1.8.2 |