Not rated
CVE-2023-28706 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow…
Description
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Airflow Hive Provider 6.0 | earliest → < 6.0.0 | 6.0.0 |
| airflow_hive_provider 6.0 | earliest → < 6.0.0 | 6.0.0 |
References
- github.com github.com
- lists.apache.org lists.apache.org
- www.openwall.com www.openwall.com
Timeline
- Published
- Last modified
Other CVEs of Apache Airflow Hive Provider
The 4 CVEs of Apache Airflow Hive Provider →
CVE-2023-25696
Improper Input Validation vulnerability in the Apache Airflow Hive Provider
Not rated
CVE-2022-46421
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software…
Not rated
CVE-2022-41131
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache…
Not rated