BIT-airflow-2023-50943

🗓️ 06 Mar 2024 10:50:50Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Apache Airflow vulnerability in versions prior to 2.8.1 allows XCom data poisoning by bypassing "enable_xcom_pickling=False" settin

Reporter	Title	Published	Views	Family All 12
NVD	CVE-2023-50943	24 Jan 202413:15	–	nvd
Hacker One	Internet Bug Bounty: Pickle deserialization vulnerability in XComs	25 Jan 202414:29	–	hackerone
Veracode	Deserialization Of Untrusted Data	25 Jan 202406:09	–	veracode
Prion	Deserialization of untrusted data	24 Jan 202413:15	–	prion
OSV	CVE-2023-50943	24 Jan 202413:15	–	osv
OSV	PYSEC-2024-13	24 Jan 202413:15	–	osv
OSV	Apache Airflow: pickle deserialization vulnerability in XComs	24 Jan 202415:30	–	osv
Cvelist	CVE-2023-50943 Apache Airflow: Potential pickle deserialization vulnerability in XComs	24 Jan 202412:57	–	cvelist
CNVD	Apache Airflow Code Execution Vulnerability (CNVD-2024-26531)	29 Jan 202400:00	–	cnvd
CVE	CVE-2023-50943	24 Jan 202413:15	–	cve

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/01/24/4
github	www.github.com/apache/airflow/pull/36255
lists	www.lists.apache.org/thread/fx278v0twqzxkcts70tc04cp3f8p56pn

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Mar 2024 10:50Current

7.4High risk

Vulners AI Score7.4

CVSS37.5

EPSS0.0053