CVE-2024-27906

creationtimestamp| type| source ---|---|--- 2024-02-29 12:32:01+00:00| seen| https://t.me/ctinow/196569 2024-02-29 12:32:15+00:00| seen| https://t.me/ctinow/196577 2025-05-06 13:20:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15102...

CVE-2024-27906

CVE-2024-27906 affects Apache Airflow versions before 2.8.2. The published docs describe a vulnerability where authenticated users can view DAG code and import errors for DAGs they should not be allowed to view via the API and the UI. The primary impact is information disclosure of DAG contents a...