Lucene search
+L

73 matches found

Vulnrichment
Vulnrichment
added 2023/04/07 2:54 p.m.10 views

CVE-2023-28706 Apache Airflow Hive Provider Beeline Remote Command Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0...

7.4AI score0.02765EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/07 2:54 p.m.16 views

CVE-2023-28706 Apache Airflow Hive Provider Beeline Remote Command Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0...

9.9AI score0.02765EPSS
SaveExploits0References3
CVE
CVE
added 2023/04/07 2:54 p.m.123 views

CVE-2023-28706

CVE-2023-28706 affects Apache Airflow Hive Provider before 6.0.0 and is caused by improper control of code generation (code injection). The vulnerability can impact confidentiality, integrity, and availability; CVSS v3.1 base score 9.8. Remediation: upgrade to 6.0.0 or later. Some sources label i...

9.8CVSS9.6AI score0.02765EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2023/04/07 2:54 p.m.12 views

CVE-2023-28706 Apache Airflow Hive Provider Beeline Remote Command Execution

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0...

9.8CVSS7.2AI score0.02765EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/03/21 12:0 a.m.3 views

PT-2023-7461

Name of the Vulnerable Software and Affected Versions Apache Airflow Hive Provider versions prior to 6.0.0 Description The issue is related to improper control of generation of code, also known as 'Code Injection'. This allows a remote attacker to execute arbitrary code. Recommendations For...

10CVSS7.6AI score0.02765EPSS
SaveExploits0References14
OSV
OSV
added 2023/02/24 12:31 p.m.17 views

GHSA-9MWF-MW74-9CV5 Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS9.4AI score0.01982EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2023/02/24 12:31 p.m.28 views

Apache Airflow Hive Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS8.9AI score0.01982EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2023/02/24 12:15 p.m.14 views

CVE-2023-25696

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS9.5AI score0.01982EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/24 12:15 p.m.20 views

Input validation

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

7.5CVSS9.4AI score0.01982EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2023/02/24 11:48 a.m.71 views

CVE-2023-25696

CVE-2023-25696 is an issue in the Apache Airflow Hive Provider (pre-5.1.3) described as an Improper Input Validation vulnerability. The NVD entry lists a CRITICAL impact (CVSSv3.1: 9.8) affecting network attack vector with no user interaction, and high confidentiality, integrity, and availability...

9.8CVSS9.5AI score0.01982EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/24 11:48 a.m.15 views

CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.5AI score0.01982EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/24 11:48 a.m.17 views

CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.7AI score0.01982EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/24 11:48 a.m.21 views

CVE-2023-25696 Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3...

9.8CVSS7.2AI score0.01982EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/02/24 12:0 a.m.10 views

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Hive Provider...

9.8CVSS7.6AI score0.01982EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/02/24 12:0 a.m.5 views

PT-2023-20253

Name of the Vulnerable Software and Affected Versions Apache Airflow Hive Provider versions prior to 5.1.3 Description The issue is related to an Improper Input Validation vulnerability in the Apache Airflow Hive Provider. Recommendations For versions prior to 5.1.3, update to version 5.1.3 or...

9.8CVSS7.3AI score0.01982EPSS
SaveExploits0References12
OSV
OSV
added 2022/12/20 12:30 p.m.24 views

GHSA-RC58-QR9J-CPGW Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS9.5AI score0.0322EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/12/20 12:30 p.m.28 views

Apache Airflow Hive Provider vulnerable to Command Injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider before 5.0.0...

9.8CVSS8.9AI score0.0322EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/12/20 11:15 a.m.35 views

CVE-2022-46421

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

9.8CVSS0.0322EPSS
SaveExploits0References2
Prion
Prion
added 2022/12/20 11:15 a.m.19 views

Command injection

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

7.5CVSS9.5AI score0.0322EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/12/20 10:20 a.m.11 views

CVE-2022-46421 Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

9.6AI score0.0322EPSS
SaveExploits0References2
Rows per page
Query Builder