CVE-2022-38054
Session Fixation
Résumé
Session Fixation
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
airflow
[{"type":"SEMVER","events":[{"introduced":"2.2.4"},{"fixed":"2.3.4"}]}]
Références
- advisory openwall.com
- advisory lists.apache.org
- web nvd.nist.gov