CVE-2022-38054: Apache Airflow session hijacking vulnerability

The Apache Software Foundation on Friday addressed two [1,2] vulnerabilities in Apache Airflow that a remote attacker to hijack a user’s session. Tracked as CVE-2022-38054, the flaw affects Apache Airflow versions 2.2.4 through 2.3.3....