ByteOS Network

NVD Vulnerability Details :

CVE-2023-25696

Modified

Source-security@apache.org

Published At-24 Feb, 2023 | 12:15

Updated At-23 Oct, 2024 | 19:35

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID	Type	Source
CWE-20	Primary	nvd@nist.gov
CWE-20	Secondary	security@apache.org

Hyperlink	Source	Resource
https://github.com/apache/airflow/pull/29502	security@apache.org	Patch
https://lists.apache.org/thread/99g0qm56wmgdxmbtdsvhj4rdnxhpzpml	security@apache.org	Mailing List Vendor Advisory