PT-2023-20278 · Apache · Apache Airflow

·

CVE-2023-25754

·

Publicado

2023-05-08

·

Atualizado

2026-02-20

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Apache Airflow versions prior to 2.6.0
Description The issue is related to a Privilege Context Switching Error. This error affects the functionality of Apache Airflow, potentially allowing unauthorized access or actions due to incorrect handling of privileges during context switching.
Recommendations For versions prior to 2.6.0, update to version 2.6.0 or later to resolve the issue.

Exploit

Correção

DoS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BIT-AIRFLOW-2023-25754
CVE-2023-25754
GHSA-JCHM-FM4Q-C2FP
PYSEC-2023-59

Produtos afetados

Apache Airflow