CVE-2017-12614
Last modified
CVE-2017-12614 is a vulnerability of currently unknown severity. It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. EPSS estimates a 2.00% chance of exploitation in the next 30 days.
Description
It was noticed an XSS in certain 404 pages that could be exploited to perform an XSS attack. Chrome will detect this as a reflected XSS attempt and prevent the page from loading. Firefox and other browsers don't, and are vulnerable to this attack. Mitigation: The fix for this is to upgrade to Apache Airflow 1.9.0 or above.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Airflow | < 1.9.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-12614?
How severe is CVE-2017-12614?
How do I fix CVE-2017-12614?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-12609Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-1261IBM Security Guardium 10.0 stores potentially sensitive info…
- CVE-2017-12610In Apache Kafka 0.10.0.0 to 0.10.2.1 and 0.11.0.0 to 0.11.0.…
- CVE-2017-12611In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10…
- CVE-2017-12612In Apache Spark 1.6.0 until 2.1.1, the launcher API performs…
- CVE-2017-12613When apr_time_exp*() or apr_os_exp_time*() functions are inv…7.1
- CVE-2017-12615When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with H…8.1
- CVE-2017-12616When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7…
- CVE-2017-12617When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0…8.1
- CVE-2017-12618Apache Portable Runtime Utility (APR-util) 1.6.0 and prior f…
- CVE-2017-12619Apache Zeppelin prior to 0.7.3 was vulnerable to session fix…
- CVE-2017-1262IBM Security Guardium 10.0 is vulnerable to HTTP response sp…
Are you affected by CVE-2017-12614?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST