Apache Airflow Hive Provider vulnerable to code injection
Apache Software Foundation's Apache Airflow Hive Provider before 6.0.0 is vulnerable to improper control of generation of code.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-28706US | critical9.8 | — | ||
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider:… | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2023/04/07/2WEB
- https://github.com/advisories/GHSA-5cvg-9pp5-mxcjADVISORY
- https://github.com/apache/airflowPACKAGE
- https://github.com/apache/airflow/pull/30212WEB
- https://lists.apache.org/thread/dl20xxd51xvlx0zzc0wzgxfjwgtbbxo3WEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-28706ADVISORY
- https://pypi.org/project/apache-airflow-providers-apache-hivePACKAGE
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan