Advisories · Technology
Apache Software Foundation Apache Airflow FAB provider.
Every CVE that names Apache Software Foundation Apache Airflow FAB provider among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.1 High
Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
- Apache Software Foundation Apache Airflow FAB provider
- CWE-346
- CVSS 7.2 High
Apache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT access
- Apache Software Foundation Apache Airflow FAB provider
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions
- Apache Software Foundation Apache Airflow FAB provider
- Authentication bypass
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always false
- Apache Software Foundation Apache Airflow FAB provider
- Authentication bypass
- CVSS 9.1 CriticalCritical · CVSS 9+
Apache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypass
- Apache Software Foundation Apache Airflow FAB provider
- CWE-346
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Airflow FAB provider: FAB auth manager: JWT signature verification disabled by default for Azure AD OAuth (`verify_signature` defaults to `False`)
- Apache Software Foundation Apache Airflow FAB provider
- Weak cryptography or TLS
- CVSS 8.1 High
Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)
- Apache Software Foundation Apache Airflow FAB provider
- Privilege escalation