PT-2023-4067 · Apache · Apache Airflow Hive Provider

·

CVE-2023-37415

·

Publicado

2023-07-12

·

Atualizado

2026-07-07

CVSS v2.0

9.0

Alta

VetorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Apache Airflow Apache Hive Provider versions prior to 6.1.2
Description The issue is related to improper input validation, which can be exploited by a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For Apache Airflow Apache Hive Provider versions prior to 6.1.2, update the provider version to 6.1.2 to avoid this issue.

Correção

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-04365
CVE-2023-37415
GHSA-4Q2Q-Q5PW-2342
PYSEC-2026-1139

Produtos afetados

Apache Airflow Hive Provider