Lucene search

CVE-2023-22887 Apache Airflow path traversal by authenticated user

🗓️ 12 Jul 2023 09:25:14Reported by apacheType

Apache Airflow unauthorized file access vulnerability CVE-2023-22887

Reporter	Title	Published	Views	Family All 13
Github Security Blog	Apache Airflow Path Traversal vulnerability	12 Jul 202312:31	–	github
CVE	CVE-2023-22887	12 Jul 202310:15	–	cve
Vulnrichment	CVE-2023-22887 Apache Airflow path traversal by authenticated user	12 Jul 202309:14	–	vulnrichment
OSV	Apache Airflow Path Traversal vulnerability	12 Jul 202312:31	–	osv
OSV	BIT-airflow-2023-22887	6 Mar 202410:55	–	osv
OSV	CVE-2023-22887	12 Jul 202310:15	–	osv
OSV	PYSEC-2023-104	12 Jul 202310:15	–	osv
Hacker One	Internet Bug Bounty: Apache Airflow path traversal by authenticated user	15 Jul 202303:20	–	hackerone
Veracode	Path Traversal	14 Jul 202309:36	–	veracode
NVD	CVE-2023-22887	12 Jul 202310:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.6.3",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/apache/airflow/pull/32293
lists	www.lists.apache.org/thread/rxddqs76r6rkxsg1n24d029zys67qwwo

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Jul 2023 09:14Current

6.4Medium risk

Vulners AI Score6.4

EPSS0.001

CWE-22