← All credits

Junghan Lee of Deliveryhero Korea Security Team

1 vulnerability record and advisories credit this contributor.

CVE-2020-17526
Incorrect Session Validation in Apache Airflow Webserver versions prior to 1.10.14 with default config allows a malicious airflow user on site A where they log in normally, to access unauthorized Airflow Webserver on Site B through the session from Site A