Apache Airflow Security Bypass Vulnerability (CNVD-2024-0101425)

Apache Airflow is the United States Apache (Apache) Foundation’s set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. A security bypass vulnerability exists in Apache Airflow versions prior to 2.8.0, which can be exploited by an authenticated attacker to gain write access to various DAG resources.