Lucene search
PRIOn knowledge basePRION:CVE-2023-42792HistoryOct 14, 2023 - 10:15 a.m.
Design/Logic Flaw
2023-10-1410:15:00
PRIOn knowledge base
www.prio-n.com
8
apache airflow
logic flaw
security vulnerability
upgrade required
limited access
write access
Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn’t.
Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.
Related
osv
osv
CVE-2023-42792
2023-10-14 10:15:10
BIT-airflow-2023-42792
2024-03-06 10:52:32
Apache Airflow vulnerable to privilege escalation
2023-10-14 12:30:23
cnvd
cnvd
Apache Airflow Authorization Problem Vulnerability (CNVD-2023-80561)
2023-10-17 00:00:00
nvd
nvd
CVE-2023-42792
2023-10-14 10:15:10
CVE-2023-48291
2023-12-21 10:15:36
cvelist
cvelist
CVE-2023-42792 Apache Airflow: Improper access control to DAG resources
2023-10-14 09:47:07
CVE-2023-48291 Apache Airflow: Improper access control to DAG resources
2023-12-21 09:30:46
cve
cve
CVE-2023-42792
2023-10-14 10:15:10
CVE-2023-48291
2023-12-21 10:15:36
veracode
veracode
Privilege Escalation
2023-10-16 13:12:49
github
github
Apache Airflow vulnerable to privilege escalation
2023-10-14 12:30:23
Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere
2023-12-21 12:30:27
prion
prion
Security feature bypass
2023-12-21 10:15:00