Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-28706

Published: 07/04/2023 Updated: 14/04/2023
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 0
Subscribe to Apache

Vulnerability Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: prior to 6.0.0.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apache airflow hive provider

References

CWE-94https://github.com/apache/airflow/pull/30212https://lists.apache.org/thread/dl20xxd51xvlx0zzc0wzgxfjwgtbbxo3http://www.openwall.com/lists/oss-security/2023/04/07/2https://nvd.nist.gov
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
hard-codedCVE-2024-27202NULL pointer dereferenceCVE-2024-28075CVE-2024-33608CVE-2024-28889CVE-2024-34572template injectionCVE-2024-34351
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook