Threats tagged 'ghsa-2738-4g2m-64cv'

A vulnerability in the Apache Airflow Amazon provider's AWS auth manager SAML login flow allows an attacker to perform login CSRF. The authentication response is not bound to the initiating browser, enabling an attacker to silently log a victim into the attacker's Airflow account by causing the victim to visit a malicious page. This affects deployments using AWS auth manager with SAML authentication. The issue is fixed in version 9.38.0.