Apache Airflow Authorization Problem Vulnerability (CNVD-2023-72233)

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow versions prior to 2.7.1 have an authorization issue vulnerability that stems from improper privilege management in the program. An attacker authorized by authentication and DAG view could use the vulnerability to modify certain DAG run details values when submitting annotations, which could allow them to change configuration parameters, start dates, and other details.