Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/12/21 9:28 a.m.30 views

CVE-2023-50783 Apache Airflow: Improper access control vulnerability on the "varimport" endpoint

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are...

6.5AI score0.0139EPSS
SaveExploits0References3
Rows per page
Query Builder