CVE-2022-38054
Session Fixation
Summary
Session Fixation
Original description
The description as published by the source.
In Apache Airflow versions 2.2.4 through 2.3.3, the database webserver session backend was susceptible to session fixation.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
airflow
[{"type":"SEMVER","events":[{"introduced":"2.2.4"},{"fixed":"2.3.4"}]}]
References
- advisory openwall.com
- advisory lists.apache.org
- web nvd.nist.gov