Lucene search

apache-airflow-providers-apache-drill Improper Input Validation vulnerability

🗓️ 11 Aug 2023 09:36:30Reported by GoogleType

osv🔗 osv.dev👁 7 Views

Improper Input Validation vulnerability in Apache Airflow Drill Provider allowing file readin

Reporter	Title	Published	Views	Family All 11
CNVD	Apache Airflow Input Validation Error Vulnerability (CNVD-2023-67067)	15 Aug 202300:00	–	cnvd
CVE	CVE-2023-39553	11 Aug 202308:15	–	cve
Veracode	Arbitrary File Read	14 Aug 202305:41	–	veracode
Prion	Input validation	11 Aug 202308:15	–	prion
OSV	CVE-2023-39553	11 Aug 202308:15	–	osv
OSV	PYSEC-2023-136	11 Aug 202308:15	–	osv
Vulnrichment	CVE-2023-39553 Apache Airflow Drill Provider Arbitrary File Read Vulnerability	11 Aug 202307:18	–	vulnrichment
Cvelist	CVE-2023-39553 Apache Airflow Drill Provider Arbitrary File Read Vulnerability	11 Aug 202307:18	–	cvelist
RedhatCVE	CVE-2023-39553	14 Feb 202512:13	–	redhatcve
NVD	CVE-2023-39553	11 Aug 202308:15	–	nvd

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-39553
github	www.github.com/apache/airflow/pull/33074
github	www.github.com/apache/airflow/commit/394a727ac2c18d58978bf186a7a92923460ec110
github	www.github.com/apache/airflow
github	www.github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-136.yaml
lists	www.lists.apache.org/thread/ozpl0opmob49rkcz8svo8wkxyw1395sf
openwall	www.openwall.com/lists/oss-security/2023/08/11/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Aug 2023 09:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS37.5

EPSS0.02415

SSVC