Vulnerability-Lookup

CVE-2024-32077 (GCVE-0-2024-32077)

Vulnerability from cvelistv5 – Published: 2024-05-14 10:43 – Updated: 2025-03-27 19:28

Title

Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Summary

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-05-14 18:35 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

apache

References

3 references

URL	Tags
https://github.com/apache/airflow/pull/38882	patch
https://lists.apache.org/thread/gsjmnrqb3m5fzp0vg…	vendor-advisory
http://www.openwall.com/lists/oss-security/2024/05/14/1

Impacted products

2 products

Vendor	Product	Version
Apache Software Foundation	Apache Airflow	Affected: 2.9.0 , < 2.9.1 (semver)
apache	airflow	Affected: 2.9.0 cpe:2.3:a:apache:airflow::::::::

Credits

Ming Jens Scheffler

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "airflow",
            "vendor": "apache",
            "versions": [
              {
                "status": "affected",
                "version": "2.9.0"
              }
            ]
          }
        ],
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 5.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2024-32077",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-05-14T18:35:34.470154Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-03-27T19:28:00.194Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T02:06:43.596Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "patch",
              "x_transferred"
            ],
            "url": "https://github.com/apache/airflow/pull/38882"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pypi.python.org",
          "defaultStatus": "unaffected",
          "packageName": "apache-airflow",
          "product": "Apache Airflow",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "2.9.1",
              "status": "affected",
              "version": "2.9.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Ming"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Jens Scheffler"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u0026nbsp;\u003cbr\u003eUsers are recommended to upgrade to version 2.9.1, which fixes this issue.\u003cbr\u003e"
            }
          ],
          "value": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "text": "moderate"
            },
            "type": "Textual description of severity"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-79",
              "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-06-10T17:09:03.874Z",
        "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
        "shortName": "apache"
      },
      "references": [
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/apache/airflow/pull/38882"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
        },
        {
          "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Apache Airflow: XSS vulnerability in Task Instance Log/Log Details",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
    "assignerShortName": "apache",
    "cveId": "CVE-2024-32077",
    "datePublished": "2024-05-14T10:43:20.299Z",
    "dateReserved": "2024-04-10T16:19:52.126Z",
    "dateUpdated": "2025-03-27T19:28:00.194Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-32077",
      "date": "2026-08-13",
      "epss": "0.01572",
      "percentile": "0.73176"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"67713622-C581-4BC0-B7B1-0FE3DD3A55C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:beta1:*:*:*:*:*:*\", \"matchCriteriaId\": \"6B4F89EF-D541-4D17-89EC-DBC97A3399AA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:beta2:*:*:*:*:*:*\", \"matchCriteriaId\": \"ADBE102C-D1FE-4D57-9E00-C9A851515063\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:rc1:*:*:*:*:*:*\", \"matchCriteriaId\": \"3186E514-8CA2-48E3-8B2B-3CD4D34447F5\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:rc2:*:*:*:*:*:*\", \"matchCriteriaId\": \"62AA6481-91E2-43C6-BE9A-B809E2A723D2\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:apache:airflow:2.9.0:rc3:*:*:*:*:*:*\", \"matchCriteriaId\": \"7F748994-9CDA-4ACE-A7DC-7EF6D1896082\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\\u00a0\\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.\\n\"}, {\"lang\": \"es\", \"value\": \"Apache Airflow versi\\u00f3n 2.9.0 tiene una vulnerabilidad que permite a un atacante autenticado inyectar datos maliciosos en los registros de instancias de tareas. Se recomienda a los usuarios actualizar a la versi\\u00f3n 2.9.1, que soluciona este problema.\"}]",
      "id": "CVE-2024-32077",
      "lastModified": "2024-12-11T15:34:18.077",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"baseScore\": 5.4, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"LOW\", \"integrityImpact\": \"LOW\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.3, \"impactScore\": 2.7}]}",
      "published": "2024-05-14T16:17:01.970",
      "references": "[{\"url\": \"http://www.openwall.com/lists/oss-security/2024/05/14/1\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/apache/airflow/pull/38882\", \"source\": \"security@apache.org\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\", \"source\": \"security@apache.org\", \"tags\": [\"Mailing List\", \"Vendor Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/05/14/1\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Third Party Advisory\"]}, {\"url\": \"https://github.com/apache/airflow/pull/38882\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Issue Tracking\", \"Patch\"]}, {\"url\": \"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Mailing List\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "security@apache.org",
      "vulnStatus": "Analyzed",
      "weaknesses": "[{\"source\": \"security@apache.org\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-79\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2024-32077\",\"sourceIdentifier\":\"security@apache.org\",\"published\":\"2024-05-14T16:17:01.970\",\"lastModified\":\"2026-06-17T07:29:12.820\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.\"},{\"lang\":\"es\",\"value\":\"Apache Airflow versi\u00f3n 2.9.0 tiene una vulnerabilidad que permite a un atacante autenticado inyectar datos maliciosos en los registros de instancias de tareas. Se recomienda a los usuarios actualizar a la versi\u00f3n 2.9.1, que soluciona este problema.\"}],\"affected\":[{\"source\":\"security@apache.org\",\"affectedData\":[{\"vendor\":\"Apache Software Foundation\",\"product\":\"Apache Airflow\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pypi.python.org\",\"packageName\":\"apache-airflow\",\"versions\":[{\"version\":\"2.9.0\",\"lessThan\":\"2.9.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"affectedData\":[{\"vendor\":\"apache\",\"product\":\"airflow\",\"defaultStatus\":\"unknown\",\"cpes\":[\"cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"2.9.0\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":5.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.3,\"impactScore\":2.7}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2024-05-14T18:35:34.470154Z\",\"id\":\"CVE-2024-32077\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security@apache.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-79\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"67713622-C581-4BC0-B7B1-0FE3DD3A55C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:beta1:*:*:*:*:*:*\",\"matchCriteriaId\":\"6B4F89EF-D541-4D17-89EC-DBC97A3399AA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:beta2:*:*:*:*:*:*\",\"matchCriteriaId\":\"ADBE102C-D1FE-4D57-9E00-C9A851515063\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3186E514-8CA2-48E3-8B2B-3CD4D34447F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"62AA6481-91E2-43C6-BE9A-B809E2A723D2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:apache:airflow:2.9.0:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F748994-9CDA-4ACE-A7DC-7EF6D1896082\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2024/05/14/1\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/airflow/pull/38882\",\"source\":\"security@apache.org\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\",\"source\":\"security@apache.org\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2024/05/14/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://github.com/apache/airflow/pull/38882\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\",\"Patch\"]},{\"url\":\"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T20:03:34+00:00",
      "cve": "CVE-2024-32077",
      "id": "CVE-2024-32077",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Apache Airflow: XSS vulnerability in Task Instance Log/Log Details",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-32077.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"cna\": {\"affected\": [{\"collectionURL\": \"https://pypi.python.org\", \"defaultStatus\": \"unaffected\", \"packageName\": \"apache-airflow\", \"product\": \"Apache Airflow\", \"vendor\": \"Apache Software Foundation\", \"versions\": [{\"lessThan\": \"2.9.1\", \"status\": \"affected\", \"version\": \"2.9.0\", \"versionType\": \"semver\"}]}], \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Ming\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Jens Scheffler\"}], \"descriptions\": [{\"lang\": \"en\", \"supportingMedia\": [{\"base64\": false, \"type\": \"text/html\", \"value\": \"Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u0026nbsp;\u003cbr\u003eUsers are recommended to upgrade to version 2.9.1, which fixes this issue.\u003cbr\u003e\"}], \"value\": \"Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\\u00a0\\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.\"}], \"metrics\": [{\"other\": {\"content\": {\"text\": \"moderate\"}, \"type\": \"Textual description of severity\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-79\", \"description\": \"CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"orgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"shortName\": \"apache\", \"dateUpdated\": \"2024-06-10T17:09:03.874Z\"}, \"references\": [{\"tags\": [\"patch\"], \"url\": \"https://github.com/apache/airflow/pull/38882\"}, {\"tags\": [\"vendor-advisory\"], \"url\": \"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/05/14/1\"}], \"source\": {\"discovery\": \"UNKNOWN\"}, \"title\": \"Apache Airflow: XSS vulnerability in Task Instance Log/Log Details\", \"x_generator\": {\"engine\": \"Vulnogram 0.1.0-dev\"}}, \"adp\": [{\"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T02:06:43.596Z\"}, \"title\": \"CVE Program Container\", \"references\": [{\"tags\": [\"patch\", \"x_transferred\"], \"url\": \"https://github.com/apache/airflow/pull/38882\"}, {\"tags\": [\"vendor-advisory\", \"x_transferred\"], \"url\": \"https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77\"}, {\"url\": \"http://www.openwall.com/lists/oss-security/2024/05/14/1\", \"tags\": [\"x_transferred\"]}]}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 5.4, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2024-32077\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-05-14T18:35:34.470154Z\"}}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*\"], \"vendor\": \"apache\", \"product\": \"airflow\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.9.0\"}], \"defaultStatus\": \"unknown\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-05-14T18:36:23.268Z\"}}]}",
      "cveMetadata": "{\"cveId\": \"CVE-2024-32077\", \"assignerOrgId\": \"f0158376-9dc2-43b6-827c-5f631a4d8d09\", \"state\": \"PUBLISHED\", \"assignerShortName\": \"apache\", \"dateReserved\": \"2024-04-10T16:19:52.126Z\", \"datePublished\": \"2024-05-14T10:43:20.299Z\", \"dateUpdated\": \"2025-03-27T19:28:00.194Z\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

bit-airflow-2024-32077

Vulnerability from bitnami_vulndb

Published

2024-05-24 07:15

Modified

2025-05-20 10:02

Summary

Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Details

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Bitnami",
        "name": "airflow",
        "purl": "pkg:bitnami/airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.9.0"
            },
            {
              "fixed": "2.9.1"
            }
          ],
          "type": "SEMVER"
        }
      ],
      "severity": [
        {
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "type": "CVSS_V3"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-32077"
  ],
  "database_specific": {
    "cpes": [
      "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
      "cpe:2.3:a:apache:airflow:*:*:*:*:*:python:*:*"
    ],
    "severity": "Medium"
  },
  "details": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.",
  "id": "BIT-airflow-2024-32077",
  "modified": "2025-05-20T10:02:07.006Z",
  "published": "2024-05-24T07:15:55.746Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/38882"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32077"
    }
  ],
  "schema_version": "1.5.0",
  "summary": "Apache Airflow: XSS vulnerability in Task Instance Log/Log Details"
}

CNVD-2024-26529

Vulnerability from cnvd - Published: 2024-06-13

Title

Apache Airflow跨站脚本漏洞（CNVD-2024-26529）

Description

Apache Airflow是美国阿帕奇（Apache）基金会的一套用于创建、管理和监控工作流程的开源平台。该平台具有可扩展和动态监控等特点。 Apache Airflow 2.9.0版本存在跨站脚本漏洞，该漏洞源于应用对用户提供的数据缺乏有效过滤与转义，攻击者可利用此漏洞窃取受害者基于cookie的身份验证凭据。

Severity

中

Patch Name

Apache Airflow跨站脚本漏洞（CNVD-2024-26529）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-32077

Impacted products

Name
Apache Airflow 2.9.0

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-32077",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-32077"
    }
  },
  "description": "Apache Airflow\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u7528\u4e8e\u521b\u5efa\u3001\u7ba1\u7406\u548c\u76d1\u63a7\u5de5\u4f5c\u6d41\u7a0b\u7684\u5f00\u6e90\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u53ef\u6269\u5c55\u548c\u52a8\u6001\u76d1\u63a7\u7b49\u7279\u70b9\u3002\n\nApache Airflow 2.9.0\u7248\u672c\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5e94\u7528\u5bf9\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\u7f3a\u4e4f\u6709\u6548\u8fc7\u6ee4\u4e0e\u8f6c\u4e49\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u7a83\u53d6\u53d7\u5bb3\u8005\u57fa\u4e8ecookie\u7684\u8eab\u4efd\u9a8c\u8bc1\u51ed\u636e\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-26529",
  "openTime": "2024-06-13",
  "patchDescription": "Apache Airflow\u662f\u7f8e\u56fd\u963f\u5e15\u5947\uff08Apache\uff09\u57fa\u91d1\u4f1a\u7684\u4e00\u5957\u7528\u4e8e\u521b\u5efa\u3001\u7ba1\u7406\u548c\u76d1\u63a7\u5de5\u4f5c\u6d41\u7a0b\u7684\u5f00\u6e90\u5e73\u53f0\u3002\u8be5\u5e73\u53f0\u5177\u6709\u53ef\u6269\u5c55\u548c\u52a8\u6001\u76d1\u63a7\u7b49\u7279\u70b9\u3002\r\n\r\nApache Airflow 2.9.0\u7248\u672c\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5e94\u7528\u5bf9\u7528\u6237\u63d0\u4f9b\u7684\u6570\u636e\u7f3a\u4e4f\u6709\u6548\u8fc7\u6ee4\u4e0e\u8f6c\u4e49\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u7a83\u53d6\u53d7\u5bb3\u8005\u57fa\u4e8ecookie\u7684\u8eab\u4efd\u9a8c\u8bc1\u51ed\u636e\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apache Airflow\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2024-26529\uff09\u7684\u8865\u4e01",
  "products": {
    "product": "Apache Airflow 2.9.0"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-32077",
  "serverity": "\u4e2d",
  "submitTime": "2024-05-30",
  "title": "Apache Airflow\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\uff08CNVD-2024-26529\uff09"
}

FKIE_CVE-2024-32077

Vulnerability from fkie_nvd - Published: 2024-05-14 16:17 - Updated: 2026-06-17 07:29

Severity

5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
5.4 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Summary

References

URL	Tags
security@apache.org	http://www.openwall.com/lists/oss-security/2024/05/14/1	Mailing List, Third Party Advisory
security@apache.org	https://github.com/apache/airflow/pull/38882	Issue Tracking, Patch
security@apache.org	https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77	Mailing List, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2024/05/14/1	Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://github.com/apache/airflow/pull/38882	Issue Tracking, Patch
af854a3a-2127-422b-91ae-364da2661108	https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77	Mailing List, Vendor Advisory

Impacted products

Vendor	Product	Version
apache	airflow	2.9.0
apache	airflow	2.9.0
apache	airflow	2.9.0
apache	airflow	2.9.0
apache	airflow	2.9.0
apache	airflow	2.9.0

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "collectionURL": "https://pypi.python.org",
          "defaultStatus": "unaffected",
          "packageName": "apache-airflow",
          "product": "Apache Airflow",
          "vendor": "Apache Software Foundation",
          "versions": [
            {
              "lessThan": "2.9.1",
              "status": "affected",
              "version": "2.9.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@apache.org"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "airflow",
          "vendor": "apache",
          "versions": [
            {
              "status": "affected",
              "version": "2.9.0"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:-:*:*:*:*:*:*",
              "matchCriteriaId": "67713622-C581-4BC0-B7B1-0FE3DD3A55C0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "6B4F89EF-D541-4D17-89EC-DBC97A3399AA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:beta2:*:*:*:*:*:*",
              "matchCriteriaId": "ADBE102C-D1FE-4D57-9E00-C9A851515063",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:rc1:*:*:*:*:*:*",
              "matchCriteriaId": "3186E514-8CA2-48E3-8B2B-3CD4D34447F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:rc2:*:*:*:*:*:*",
              "matchCriteriaId": "62AA6481-91E2-43C6-BE9A-B809E2A723D2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:apache:airflow:2.9.0:rc3:*:*:*:*:*:*",
              "matchCriteriaId": "7F748994-9CDA-4ACE-A7DC-7EF6D1896082",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue."
    },
    {
      "lang": "es",
      "value": "Apache Airflow versi\u00f3n 2.9.0 tiene una vulnerabilidad que permite a un atacante autenticado inyectar datos maliciosos en los registros de instancias de tareas. Se recomienda a los usuarios actualizar a la versi\u00f3n 2.9.1, que soluciona este problema."
    }
  ],
  "id": "CVE-2024-32077",
  "lastModified": "2026-06-17T07:29:12.820",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 2.7,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-32077",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-05-14T18:35:34.470154Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-05-14T16:17:01.970",
  "references": [
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/apache/airflow/pull/38882"
    },
    {
      "source": "security@apache.org",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Issue Tracking",
        "Patch"
      ],
      "url": "https://github.com/apache/airflow/pull/38882"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mailing List",
        "Vendor Advisory"
      ],
      "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
    }
  ],
  "sourceIdentifier": "security@apache.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "security@apache.org",
      "type": "Secondary"
    }
  ]
}

GHSA-52GM-QMG3-R4QP

Vulnerability from github – Published: 2024-05-14 18:31 – Updated: 2026-06-05 14:14

Summary

Apache Airflow: XSS vulnerability in Task Instance Log/Log Details

Details

Severity

5.4 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "2.9.0"
            },
            {
              "fixed": "2.9.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "2.9.0"
      ]
    }
  ],
  "aliases": [
    "CVE-2024-32077"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-14T21:47:02Z",
    "nvd_published_at": "2024-05-14T16:17:01Z",
    "severity": "MODERATE"
  },
  "details": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.",
  "id": "GHSA-52gm-qmg3-r4qp",
  "modified": "2026-06-05T14:14:37Z",
  "published": "2024-05-14T18:31:00Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-32077"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/pull/38882"
    },
    {
      "type": "WEB",
      "url": "https://github.com/apache/airflow/commit/87acf61f574daf47ce9e03a986e352a2c727f4ce"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/apache/airflow"
    },
    {
      "type": "WEB",
      "url": "https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-264.yaml"
    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Apache Airflow: XSS vulnerability in Task Instance Log/Log Details"
}

GSD-2024-32077

Vulnerability from gsd - Updated: 2024-04-11 05:03

Details

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Aliases

CVE-2024-32077

JSON

To clipboard

{
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2024-32077"
      ],
      "id": "GSD-2024-32077",
      "modified": "2024-04-11T05:03:18.991264Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2024-32077",
        "STATE": "RESERVED"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided."
          }
        ]
      }
    }
  }
}

PYSEC-2024-264

Vulnerability from pysec - Published: 2024-05-14 16:17 - Updated: 2025-03-27 20:15

Details

Severity

5.4 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Impacted products

Name	purl
apache-airflow	pkg:pypi/apache-airflow

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "apache-airflow",
        "purl": "pkg:pypi/apache-airflow"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "2.9.0-NA"
            },
            {
              "last_affected": "2.9.0-beta1"
            },
            {
              "last_affected": "2.9.0-beta2"
            },
            {
              "last_affected": "2.9.0-rc1"
            },
            {
              "last_affected": "2.9.0-rc2"
            },
            {
              "last_affected": "2.9.0-rc3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2024-32077",
    "GHSA-52gm-qmg3-r4qp"
  ],
  "details": "Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs.\u00a0\nUsers are recommended to upgrade to version 2.9.1, which fixes this issue.",
  "id": "PYSEC-2024-264",
  "modified": "2025-03-27T20:15:26.090Z",
  "published": "2024-05-14T16:17:01.970Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "http://www.openwall.com/lists/oss-security/2024/05/14/1"
    },
    {
      "type": "ADVISORY",
      "url": "https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77"
    },
    {
      "type": "FIX",
      "url": "https://github.com/apache/airflow/pull/38882"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-52gm-qmg3-r4qp"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2024-32077 (GCVE-0-2024-32077)

bit-airflow-2024-32077

Vulnerability from bitnami_vulndb

CNVD-2024-26529

FKIE_CVE-2024-32077

GHSA-52GM-QMG3-R4QP

GSD-2024-32077

PYSEC-2024-264

Tags

Sightings

Nomenclature