CVE-2022-41672

8.1HIGH

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

Published: 10/7/2022Updated: 11/21/2024
View on NVDView on MITRE

Description

In Apache Airflow, prior to version 2.4.1, deactivating a user wouldn't prevent an already authenticated user from being able to continue using the UI or API.

AI AnalysisPowered by AI

Affected Products

apacheairflow

References