CVE-2022-43985

CVE-2022-43985: Apache Airflow prior to 2.4.2 has an open redirect

Vendor Apache Software Foundation

Product Apache Airflow

Weakness CWE-601 · Open redirect

Published November 2, 2022

Last update May 2, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

In Apache Airflow versions prior to 2.4.2, there was an open redirect in the webserver's `/confirm` endpoint.

Key dates

02Disclosure timeline

November 2, 2022 CVE published

May 2, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-43985 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/601.html AskarLabs — CWE-601 write-up URL Redirection to Untrusted Site (Open Redirect)

Related vulnerabilities

04Related CVE

CVE-2025-68602 WordPress Accept Donations with PayPal plugin <= 1.5.2 - Open Redirection vulnerability CVE-2025-30795 WordPress Automation By Autonami plugin <= 3.5.1 - Open Redirection vulnerability CVE-2026-61901 Joomla Extension - hikashop.com - Open redirect in Hikashop < 6.5.2 CVE-2025-30781 WordPress Scheduled & Automatic Order Status Controller for WooCommerce plugin <= 3.7.1 - Open Redirection Vulnerability CVE-2025-39599 WordPress Listdom plugin <= 4.0.0 - Open Redirection Vulnerability