Lucene search
PRIOn knowledge basePRION:CVE-2024-27906HistoryFeb 29, 2024 - 11:15 a.m.
Security feature bypass
2024-02-2911:15:00
PRIOn knowledge base
www.prio-n.com
7
apache airflow
vulnerability
authenticated users
unauthorized
dag code
import errors
api
ui
upgrade
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
Users of Apache Airflow are recommended to upgrade to version 2.8.2 or newer to mitigate the risk associated with this vulnerability
Related
cve
cve
CVE-2024-27906
2024-02-29 11:15:08
cvelist
cvelist
CVE-2024-27906 Apache Airflow: Dag Code and Import Error Permissions Ignored
2024-02-29 11:02:19
veracode
veracode
Exposure Of Resource To Wrong Sphere
2024-03-03 11:37:35
github
github
Apache Airflow: DAG Code and Import Error Permissions Ignored
2024-02-29 12:31:06
nvd
nvd
CVE-2024-27906
2024-02-29 11:15:08
osv
osv
Apache Airflow: DAG Code and Import Error Permissions Ignored
2024-02-29 12:31:06
CVE-2024-27906
2024-02-29 11:15:08
BIT-airflow-2024-27906
2024-03-31 18:16:47