https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:23:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00577 bdu:2024-00577 https://cve.radiocsirt.org/vuln/bdu:2024-00577 https://cve.radiocsirt.org/vuln/bit-airflow-2023-49920 <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> <p><strong>Affected:</strong> Bitnami: airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> https://cve.radiocsirt.org/vuln/bit-airflow-2023-49920 https://cve.radiocsirt.org/vuln/cnvd-2024-01017 cnvd-2024-01017 https://cve.radiocsirt.org/vuln/cnvd-2024-01017 https://cve.radiocsirt.org/vuln/euvd-2026-216970 EUVD-2026-216970 https://cve.radiocsirt.org/vuln/euvd-2026-216970 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49920 <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49920 https://cve.radiocsirt.org/vuln/ghsa-6m9r-7wrx-xmr6 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> https://cve.radiocsirt.org/vuln/ghsa-6m9r-7wrx-xmr6 https://cve.radiocsirt.org/vuln/gsd-2023-49920 gsd-2023-49920 https://cve.radiocsirt.org/vuln/gsd-2023-49920 https://cve.radiocsirt.org/vuln/pysec-2023-266 <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> <p><strong>Affected:</strong> PyPI: apache-airflow</p> <p>Apache Airflow, version 2.7.0 through 2.7.3, has a vulnerability that allows an attacker to trigger a DAG in a GET request without CSRF validation. As a result, it was possible for a malicious website opened in the same browser - by the user who also had Airflow UI opened - to trigger the execution of DAGs without the user&#39;s consent. Users are advised to upgrade to version 2.8.0 or later which is not affected</p> https://cve.radiocsirt.org/vuln/pysec-2023-266