Apache Airflow Contains Open Redirect

MEDIUM 6.1CVE-2022-45402 · BIT-airflow-2022-45402 · GHSA-rg94-84xj-7gq3 · Published 15/11/2022 · updated 17/06/2026

Package	Affected versions	Patched versions
apache-airflow PyPI	`< 2.4.3`	`2.4.3`
airflow apache	`< 2.4.3`	`2.4.3`

Description

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's /login endpoint.

NVD description

In Apache Airflow versions prior to 2.4.3, there was an open redirect in the webserver's `/login` endpoint.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.