title: Apache Airflow prior to 2.4.2 has an open redirect
description: In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: Apache Software Foundation
product: Apache Airflow
versions:
version: unspecified, lessThan: 2.4.2, status: affected, versionType: custom
}