Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-55392
HistoryJul 05, 2023 - 12:00 a.m.

Apache Hive Provider Code Execution Vulnerability

2023-07-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
apache airflow
hive provider
code execution
input validation
vulnerability
apache foundation
distributed storage
sql
attacker
arbitrary code
system

EPSS

0.003

Percentile

70.5%

Apache Airflow is a suite of open source platforms for creating, managing, and monitoring workflows from the Apache Foundation.The Apache Airflow Hive Provider is a toolkit for reading, writing, and managing large datasets in distributed storage using SQL. A code execution vulnerability exists in Apache Airflow Hive Provider, which is caused by incorrect validation of inputs to the subject parameter. An attacker can exploit this vulnerability to execute arbitrary code on the system.

EPSS

0.003

Percentile

70.5%