CVE-2025-57735— Apache Airflow 安全漏洞
Possible ATT&CK Techniques 1AI
T1528 · Steal Application Access Token新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-57735の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Apache Airflow: Airflow Logout Not Invalidating JWT
ソース: NVD (National Vulnerability Database)
脆弱性説明
When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted. In Airflow 3.2 we implemented the mechanism that implements token invalidation at logout. Users who are concerned about the logout scenario and possibility of intercepting the tokens, should upgrade to Airflow 3.2+ Users are recommended to upgrade to version 3.2.0, which fixes this issue.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
不充分的会话过期机制
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Apache Airflow 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Apache Airflow是美国阿帕奇（Apache）基金会的一套具有创建、管理和监控工作流程功能的开源平台。该平台具有可扩展和动态监控等特点。 Apache Airflow 3.2之前版本存在安全漏洞，该漏洞源于注销时未使JWT令牌失效，可能导致令牌被拦截后重用。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Apache Software Foundation | Apache Airflow | 3.0.0 ~ 3.2.0 | - |
II. CVE-2025-57735の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-57735のインテリジェンス情報
请登录查看更多情报信息。
CVE-2025-57735 补丁与修复 (1)
Same Patch Batch · Apache Software Foundation · 2026-04-09 · 17 CVEs total
| CVE-2026-34500 | Apache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled | |
| CVE-2026-34487 | Apache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer tok | |
| CVE-2026-34486 | Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor | |
| CVE-2026-34483 | Apache Tomcat: Incomplete escaping of JSON access logs | |
| CVE-2026-32990 | Apache Tomcat: Fix for CVE-2025-66614 is incomplete | |
| CVE-2026-29146 | Apache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by default | |
| CVE-2026-29145 | Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail i | |
| CVE-2026-29129 | Apache Tomcat: TLS cipher order is not preserved | |
| CVE-2026-25854 | Apache Tomcat: Occasionally open redirect | |
| CVE-2026-24880 | Apache Tomcat: Request smuggling via invalid chunk extension | |
| CVE-2026-40046 | Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168 | |
| CVE-2026-33005 | Apache OpenMeetings: Insufficient checks in FileWebService | |
| CVE-2026-33266 | Apache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and Salt | |
| CVE-2026-34020 | Apache OpenMeetings: Login Credentials Passed via GET Query Parameters | |
| CVE-2025-62188 | Apache DolphinScheduler: Users can access sensitive information through the actuator endpo | |
| CVE-2026-34538 | Apache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure) |
IV. 関連脆弱性
同じ製品: Apache Airflow
- CVE-2026-33264
Apache Airflow: DAG author RCE on webserver via unrestricted - CVE-2026-49487
Apache Airflow: Task-instance API exposes secrets in deferre - CVE-2026-48828
Apache Airflow: Bulk JSON Variables bypass should_hide_value - CVE-2026-49296
Apache Airflow: Per-DAG read bypass discloses co-located DAG - CVE-2026-48891
Apache Airflow: /ui/dependencies scheduling graph leaks unre
同じベンダー: Apache Software Foundation
- CVE-2026-59245
Apache Airflow FAB provider: FAB auth manager: a DAG named " - CVE-2026-58065
Apache Airflow Git provider: Git provider hook defaults to S - CVE-2026-41041
Apache Gravitino: URL path injection via unencoded user-supp - CVE-2026-49876
Apache Gravitino: Authenticated SSRF in Gravitino JobManager - CVE-2026-49844
Apache Log4j API: Improper serialization of non-finite float
同じ弱点: CWE-613
- CVE-2026-44383
Hydro-Québec Le Circuit Electrique charging station backend - CVE-2026-56665
ZITADEL: Missing Token Expiration (`exp`) Validation in JWT - CVE-2026-56664
ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) - CVE-2026-28564
Apache IoTDB: REST Basic Authentication Accepts Stale Cached - CVE-2026-59219
Open WebUI: Realtime endpoints accept Redis-revoked JWTs aft
V. CVE-2025-57735へのコメント
まだコメントはありません