Apache Airflow Drill Provider vulnerable to improper input validation
Apache Software Foundation's Apache Airflow Drill Provider before 2.3.2 is vulnerable to improper input validation because the host passed in drill connection is not sanitized.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-28707US | high7.5 | — | ||
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2. | ||||
02
references
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2023/04/07/1WEB
- https://github.com/advisories/GHSA-85pf-r4c7-3j9rADVISORY
- https://github.com/apache/airflowPACKAGE
- https://github.com/apache/airflow/commit/63d9b24aad0b4b9397682ddac1ea5824354789b3WEB
- https://github.com/apache/airflow/pull/30215WEB
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-3.yamlWEB
- https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtkWEB
- https://nvd.nist.gov/vuln/detail/CVE-2023-28707ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan