Lucene search
+L

3 matches found

OSV
OSV
added 2024/01/24 3:30 p.m.30 views

GHSA-C3C6-F2WW-XFR2 Apache Airflow: pickle deserialization vulnerability in XComs

Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enablexcompickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it...

8.7CVSS7.2AI score0.0121EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2024/01/24 3:30 p.m.33 views

Apache Airflow: pickle deserialization vulnerability in XComs

Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enablexcompickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it...

7.5CVSS7.3AI score0.0121EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2024/01/24 12:57 p.m.22 views

CVE-2023-50943 Apache Airflow: Potential pickle deserialization vulnerability in XComs

Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enablexcompickling=False" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it...

7.6AI score0.0121EPSS
SaveExploits0References3
Rows per page
Query Builder