CVE-2024-27906

creationtimestamp| type| source ---|---|--- 2024-02-29 12:32:01+00:00| seen| https://t.me/ctinow/196569 2024-02-29 12:32:15+00:00| seen| https://t.me/ctinow/196577 2025-05-06 13:20:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15102...

CVE-2024-27906

Apache Airflow versions before 2.8.2 are vulnerable to an information disclosure vulnerability due to improper permission checks in the API and UI components. This flaw allows authenticated users to view DAG code and import errors for DAGs they are not authorized to access. To mitigate this risk,...