Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-88037
HistoryJul 14, 2023 - 12:00 a.m.

Apache Airflow Security Bypass Vulnerability

2023-07-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
apache airflow
security bypass
vulnerability
dag
specially crafted request
attacker
united states apache foundation
open source platform

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

41.2%

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.6.3, which can be exploited by an attacker to access the DAG by sending a specially crafted request.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

41.2%