Lucene search
+L

3298 matches found

OSV
OSV
added 2023/03/15 9:37 a.m.19 views

CVE-2023-25695 Information disclosure in Apache Airflow

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...

5.3CVSS6.1AI score
SaveExploits0References4
Cvelist
Cvelist
added 2023/03/15 9:37 a.m.29 views

CVE-2023-25695 Information disclosure in Apache Airflow

Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.5.2...

5.5AI score0.01382EPSS
SaveExploits0References2
CVE
CVE
added 2023/03/15 9:37 a.m.100 views

CVE-2023-25695

CVE-2023-25695 affects Apache Airflow prior to 2.5.2 and is an information-disclosure vulnerability caused by error messages that can contain sensitive data. The related advisories note that tracebacks may reveal details (e.g., Python/Airflow version, node name) to users, potentially aiding targe...

5.3CVSS5.2AI score0.01382EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/15 12:00 a.m.8 views

PT-2023-20252 · Apache · Apache Airflow

Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.5.2 Description: The issue is related to the generation of error messages containing sensitive information. This could potentially provide useful information to attackers, including the Python/Airflow versio...

6.9CVSS6.9AI score0.01382EPSS
SaveExploits0References13
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.8 views

Apache Airflow 安全漏洞

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform is scalable and dynamically monitored, etc. An information disclosure vulnerability exists in versions prior to Apache Airflow 2.5.2, which stems from the fact that...

5.3CVSS6AI score0.01382EPSS
SaveExploits0References3
Hacker One
Hacker One
added 2023/03/07 4:04 p.m.125 views

Internet Bug Bounty: CVE-2023-25692: Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service and Remote Command Execution

An improper input validation vulnerability was discovered in the Apache Airflow Google Provider, affecting versions before 8.10.0. Attackers could modify existing connection configuration information to execute malicious commands or create arbitrary files, leading to denial of service...

7.5CVSS7.5AI score0.01826EPSS
SaveExploits0
Hacker One
Hacker One
added 2023/03/07 3:11 p.m.162 views

Internet Bug Bounty: Apache Airflow Google Cloud Sql Provider Remote Command Execution

An improper input validation vulnerability was discovered in Apache Airflow Google Provider before version 8.10.0, which could allow an attacker to execute remote commands on the victim's machine by modifying the existing connection configuration information. The vulnerability was discovered by X...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2023/03/01 12:00 a.m.64 views

Apache Airflow Google Provider Input Validation Error Vulnerability (CNVD-2023-88040)

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Google Provider...

7.5CVSS6.7AI score0.01826EPSS
SaveExploits0References1
Veracode
Veracode
added 2023/02/28 8:56 a.m.15 views

Information Disclosure

apacheairflowprovidersamazon is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to confidential data due to error messages containing sensitive information, resulting in the disclosure of sensitive information...

7.5CVSS7.5AI score0.01499EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2023/02/28 7:56 a.m.24 views

Remote Code Execution (RCE)

apacheairflowprovidersapachesqoop is vulnerable to Remote Code Execution RCE. The vulnerability is caused by improper sanitization in sqoop.py due to the libjars parameter which allows an attacker to upload and execute malicious code on the system...

9.8CVSS9.5AI score0.01895EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2023/02/28 12:00 a.m.43 views

Apache Airflow AWS Provider Information Disclosure Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An information disclosure vulnerability exists in Apache Airflow AWS Provider...

7.5CVSS6.1AI score0.01499EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/28 12:00 a.m.63 views

Apache Airflow Sqoop Provider Input Validation Error Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Sqoop Provider...

9.8CVSS7.6AI score0.01895EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/28 12:00 a.m.18 views

Apache Airflow Hive Provider Input Validation Error Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Hive Provider...

9.8CVSS7.7AI score0.01982EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/28 12:00 a.m.70 views

Apache Airflow Google Provider Input Validation Error Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Google Provider...

9.8CVSS7.6AI score0.01597EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2023/02/24 12:31 p.m.32 views

Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS8.9AI score0.01982EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/02/24 12:31 p.m.63 views

GHSA-J69X-V4WC-3FPF Apache Airflow Sqoop Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1...

9.8CVSS9.4AI score0.01895EPSS
SaveExploits0References5
OSV
OSV
added 2023/02/24 12:31 p.m.19 views

GHSA-9MWF-MW74-9CV5 Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS9.4AI score0.01982EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/02/24 12:31 p.m.31 views

Apache Airflow Google Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0...

9.8CVSS8.9AI score0.01597EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2023/02/24 12:31 p.m.46 views

GHSA-8G23-2Q5P-8866 Apache Airflow Google Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0...

9.8CVSS9.4AI score0.01597EPSS
SaveExploits0References4
OSV
OSV
added 2023/02/24 12:31 p.m.21 views

GHSA-W695-P3J5-HRJ9 Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1...

7.5CVSS7.4AI score0.01499EPSS
SaveExploits0References4
Rows per page
Query Builder