Lucene search
PRIOn knowledge basePRION:CVE-2023-48291HistoryDec 21, 2023 - 10:15 a.m.
Security feature bypass
2023-12-2110:15:00
PRIOn knowledge base
www.prio-n.com
2
apache airflow
security vulnerability
write access
dag resources
unauthorized
upgrade
version 2.8.0
cve-2023-42792
Apache Airflow, in versions prior to 2.8.0, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn’t.
This is a missing fix for CVE-2023-42792 in Apache Airflow 2.7.2
Users of Apache Airflow are strongly advised to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability.
Related
osv
osv
CVE-2023-48291
2023-12-21 10:15:36
BIT-airflow-2023-48291
2024-03-06 10:51:25
Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere
2023-12-21 12:30:27
cvelist
cvelist
CVE-2023-48291 Apache Airflow: Improper access control to DAG resources
2023-12-21 09:30:46
CVE-2023-42792 Apache Airflow: Improper access control to DAG resources
2023-10-14 09:47:07
nvd
nvd
CVE-2023-48291
2023-12-21 10:15:36
CVE-2023-42792
2023-10-14 10:15:10
cve
cve
CVE-2023-48291
2023-12-21 10:15:36
CVE-2023-42792
2023-10-14 10:15:10
github
github
Apache Airflow vulnerable to Exposure of Resource to Wrong Sphere
2023-12-21 12:30:27
Apache Airflow vulnerable to privilege escalation
2023-10-14 12:30:23
cnvd
cnvd
Apache Airflow Security Bypass Vulnerability (CNVD-2024-0101425)
2023-12-25 00:00:00
Apache Airflow Authorization Problem Vulnerability (CNVD-2023-80561)
2023-10-17 00:00:00
veracode
veracode
Improper Authorization
2023-12-22 11:48:05
Privilege Escalation
2023-10-16 13:12:49
prion
prion
Design/Logic Flaw
2023-10-14 10:15:00