Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 347

Export CSV
CVE-2023-28710

Apache Airflow Spark Provider Arbitrary File Read via JDBC

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

CVSS 3.1 · 7.5 High EPSS 2.2% KEV · Not listed
Vendors
Apache
Products
Apache-airflow-providers-apache-spark
CVE-2023-25956

Apache Airflow AWS Provider: Arbitrary file read via AWS provider

Generation of Error Message Containing Sensitive Information vulnerability in the Apache Airflow AWS Provider. This issue affects Apache Airflow AWS Provider versions before 7.2.1.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Apache
Products
Apache-airflow-providers-amazon
CVE-2023-25696

Apache Airflow Hive Provider Beeline RCE

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

CVSS 3.1 · 9.8 Critical EPSS 2.0% KEV · Not listed
Vendors
Apache
Products
Apache-airflow-providers-apache-hive
CVE-2023-22886

Apache Airflow JDBC Provider: RCE Vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s [Connection URL] parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission. This issue affects Apache Airflow JDBC Provider: before 4.0.0.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Apache
Products
Apache-airflow-providers-jdbc
CVE-2022-38362

Docker Provider <3.0 RCE vulnerability in example dag

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

CVSS 3.1 · 8.8 High EPSS 2.0% KEV · Not listed
Vendors
Apache
Products
Apache-airflow-providers-docker
CVE-2022-36364

Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector

Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, which can lead to code execution loaded via arbitrary classes and in rare cases remote code execution. To exploit the vulnerability: 1) the attacker needs to have privileges to control JDBC connection parameters; 2) and there should be a vulnerable class (constructor with URL parameter and ability to execute code) in the classpath. From Apache Calcite Avatica 1.22.0 onwards, it will be verified that the class implements the expected interface before invoking its constructor.

CVSS 3.1 · 8.8 High EPSS 3.2% KEV · Not listed
Vendors
Apache
Products
Apache Calcite Avatica