CVE-2017-17835

HIGH · CVSS 8.8 EPSS 2.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-01-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2017-17835

Severity

HIGH

CVSS

8.8

EPSS

2.04%

Apache

In Apache Airflow 1.8.2 and earlier, a CSRF vulnerability allowed for a remote command injection on a default install of Airflow.