description: In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.
problem types: Information Disclosure
affected:
{
product: Apache Airflow
vendor: n/a
versions:
status: affected, version: Apache Airflow < 1.10.12
}