[<prev] [next>] [day] [month] [year] [list]
Message-ID: <ac5b8ffa-c396-7733-6786-61f682ad6081@apache.org>
Date: Fri, 07 Apr 2023 13:57:35 +0000
From: Jarek Potiuk <potiuk@...che.org>
To: oss-security@...ts.openwall.com
Subject: CVE-2023-28707: Airflow Apache Drill Provider Arbitrary File Read
Vulnerability
Severity: low
Description:
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.
Credit:
Kai Zhao of 3H Secruity Team (finder)
References:
https://github.com/apache/airflow/pull/30215
https://airflow.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-28707
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
