Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-37415

Published: 13/07/2023 Updated: 25/07/2023
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 0
Subscribe to Apache-airflow-providers-apache-hive

Vulnerability Summary

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 prior to 6.1.2 the proxy_user option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: prior to 6.1.2. It is recommended updating provider version to 6.1.2 in order to avoid this vulnerability.

Vulnerable Product Search on Vulmon Subscribe to Product

apache apache-airflow-providers-apache-hive

References

CWE-20https://lists.apache.org/thread/9wx0jlckbnycjh8nj5qfwxo423zvm41khttp://www.openwall.com/lists/oss-security/2023/07/12/3https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook