CVE-2021-45230

Fixed upstream EPSS 2%

In Apache Airflow prior to 2.2.0. This CVE applies to a specific case where a User who has "can_create" permissions on DAG Runs can create Dag Runs for dags that they don't have "edit" permissions for.

Published 2022-01-20 · CVE record · OSV

Products: Apache Software Foundation Apache Airflow

Fixed upstream