Security Advisory

CVE-2023-42781

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-11-12 13:14:09

Last updated 2025-02-13 17:09:41

Assigner apache

CVSS score not scored

State PUBLISHED

Description

Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a different issue than CVE-2023-42663 but leading to similar outcome. Users of Apache Airflow are advised to upgrade to version 2.7.3 or newer to mitigate the risk associated with this vulnerability.

← Browse all CVEs View on cve.org ↗