VYPR
High severity8.8NVD Advisory· Published Jan 23, 2019· Updated Jun 17, 2026

CVE-2017-17835

CVE-2017-17835

Description

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
apache-airflowPyPI
< 1.9.01.9.0

Affected products

3
  • Apache/Airflow2 versions
    cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*range: <=1.8.2
    • (no CPE)range: Apache Airflow <= 1.8.2
  • ghsa-coords
    Range: < 1.9.0

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.