Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Apache-airflow-providers-jdbc
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-22886 1 Apache 1 Apache-airflow-providers-jdbc 2024-02-28 N/A 8.8 HIGH
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s [Connection URL] parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission. This issue affects Apache Airflow JDBC Provider: before 4.0.0.