CVE-2023-25691 Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

2023-02-2411:35:49

CWE-20

apache

www.cve.org

apache airflow

google cloud sql

remote command execution

vulnerability

input validation

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.0%

JSON

Improper Input Validation vulnerability in the Apache Airflow Google Provider.

This issue affects Apache Airflow Google Provider versions before 8.10.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow Google Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "8.10.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]