CVE-2023-48291 Apache Airflow: Improper access control to DAG resources

🗓️ 21 Dec 2023 09:30:46Reported by GoogleType

osv

osv🔗 osv.dev👁 27 Views

Apache Airflow vulnerability allows unauthorized user to gain write access to DAG resource

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in the ability to disclose information in the error-prone data area, allowing an intruder to gain unauthorized access to the database.	23 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-48291	21 Dec 202311:22	–	circl
CNNVD	Apache Airflow 安全漏洞	21 Dec 202300:00	–	cnnvd
CNVD	Apache Airflow Security Bypass Vulnerability (CNVD-2024-0101425)	25 Dec 202300:00	–	cnvd
CVE	CVE-2023-48291	21 Dec 202309:30	–	cve
Cvelist	CVE-2023-48291 Apache Airflow: Improper access control to DAG resources	21 Dec 202309:30	–	cvelist
Github Security Blog	Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere	21 Dec 202312:30	–	github
NVD	CVE-2023-48291	21 Dec 202310:15	–	nvd
OSV	BIT-AIRFLOW-2023-48291 Apache Airflow: Improper access control to DAG resources	6 Mar 202410:51	–	osv
OSV	GHSA-8F57-WCMG-4JMH Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere	21 Dec 202312:30	–	osv

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/12/21/1
pypi	www.pypi.python.org/
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48291.json
lists	www.lists.apache.org/thread/3nl0h014274yjlt1hd02z0q78ftyz0z3
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-48291
github	www.github.com/apache/airflow/pull/34366

08 Jul 2026 06:26Current

6Medium risk

Vulners AI Score6

CVSS 3.14.3

EPSS0.018

apache airflow security vulnerability unauthorized access