Description: In Apache Airflow 2.3.0 through 2.3.4, there was an open redirect in the webserver's `/confirm` endpoint.
Credit: The Apache Airflow PMC would like to thank Konstantin Weddige (Lutra Security) for reporting this issue. References: https://github.com/apache/airflow/pull/26409
