A bug in AWS Apache Airflow allowed hackers to hijack sessions and perform remote code execution. The bug is a manifestation of a larger misconfiguration issue common to AWS, Microsoft Azure, and Google Cloud. The fix for this issue involves restructuring domain architecture or adding domains to the Public Suffix List (PSL).
Sort: