CVE-2023-50783

Katalog CVE

CVSS 6.5 · Medium EPSS 1,4%

Kerentanan Improper Access Control pada apache airflow. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue

Rincian

Terbit di NVD

21 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-284: Improper Access Control

EPSS (30 hari)

1,4% peluang dieksploitasi; lebih tinggi dari 71,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/apache/airflow/pull/33932 patch
• http://www.openwall.com/lists/oss-security/2023/12/21/4 mailing list · advisory pihak ketiga
• https://lists.apache.org/thread/rs7cr3yp726mb89s1m844hy9pq7frgcn mailing list · advisory pihak ketiga