Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 27/06/2023 Updated: 06/07/2023

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 0

Subscribe to Apache-airflow-providers-odbc

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it. This issue affects Apache Airflow ODBC Provider: prior to 4.0.0; Apache Airflow MSSQL Provider: prior to 3.4.1. It is recommended to upgrade to a version that is not affected

Vulnerable Product	Search on Vulmon	Subscribe to Product
apache apache-airflow-providers-odbc
apache apache-airflow-providers-microsoft-mssql

CWE-20 https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pj https://github.com/apache/airflow/pull/31984 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-35798

Vulnerability Summary

References

Vulmon Search

About

Products

Connect