CVE-2024-27906

creationtimestamp| type| source ---|---|--- 2024-02-29 12:32:01+00:00| seen| https://t.me/ctinow/196569 2024-02-29 12:32:15+00:00| seen| https://t.me/ctinow/196577 2025-05-06 13:20:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15102...

CVE-2024-27906

Versions of Apache Airflow prior to 2.8.2 are affected by an information disclosure vulnerability. This flaw allows authenticated users to bypass permission restrictions to view DAG code and import errors of DAGs they are not authorized to access via the API and UI . To mitigate this risk, users ...