2 matches found
BIT-AIRFLOW-2023-50944 Apache Airflow: Bypass permission verification to read code of other dags
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version...
6.5CVSS6.2AI score0.00979EPSS
SaveExploits0References4
SquirrelMail未授权源代码修改包被入侵漏洞
BUGTRAQ ID: 26879 CNCAN ID:CNCAN-2007121804 SquirrelMail是一款流行的开放源代码的WEB MAIl程序。 SquirrelMail供应商报告源代码被入侵修改,存在很大的安全隐患,使用此不安全代码可导致以WEB权限执行任意指令。 目前没有详细漏洞细节提供。 SquirrelMail SquirrelMail 1.4.12 SquirrelMail SquirrelMail 1.4.11 升级程序: SquirrelMail SquirrelMail 1.4.11 SquirrelMail squirrelmail-1.4.13.tar....
6.9AI score
SaveExploits0
20