logo

Database

Lack of data validation In apache-airflow

Description

Apache Airflow Improper Input Validation vulnerability Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2023-365432. NVD-2023-365433. OSV-2023-365434. GCVE-2023-36543

References

1. https://github.com/apache/airflow/pull/320602. https://github.com/apache/airflow/commit/116e607ddcb32480e57c342f48226545ac6fc3153. https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-106.yaml4. https://lists.apache.org/thread/tokfs980504ylgk3cv3hjlnrtbv4tng4

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.