Ephraim Anierobi

O provedor Git do Apache Airflow executa operações git-over-SSH com `StrictHostKeyChecking=no` por padrão, desativando a verificação de chave de host SSH. Isso permite que um invasor capaz de interceptar o caminho da rede entre um worker do Airflow e o servidor Git realize um ataque de man-in-the-middle. Tal ataque pode levar à captura da chave de implantação SSH ou à injeção de conteúdo malicioso no repositório. O problema afeta implantações que utilizam o Git DAG bundle ou o provedor Git para clonar via SSH com uma chave de implantação.

The issue is related to improper access control in Apache Airflow, allowing an authenticated user without the variable edit permission to update a variable. This compromises the integrity of variable management and could lead to unauthorized data modification.

The issue allows an authorized user with access to read specific DAGs only to read information about task instances in other DAGs. This is due to a lack of protection for internal data. Exploitation of this issue may allow a remote attacker to gain read access to data.

The issue allows an unauthorized actor to gain access to sensitive information in the Connection edit view. This is considered a low-risk vulnerability as it requires access to Connection resources and specific actions to exploit.