Skip to content

Product

apache-airflow-providers-apache-drill vulnerabilities

3 published CVES affecting apache-airflow-providers-apache-drill, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
3
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest apache-airflow-providers-apache-drill CVEs

Newest publication first

  1. CVE-2023-40272 Apache Airflow Spark Provider Arbitrary File Read via JDBC

    Published
    HighCVSS 7.5 EPSS 2.1%

    Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is...

  2. CVE-2023-39553 Apache Airflow Drill Provider Arbitrary File Read Vulnerability

    Published
    HighCVSS 7.5 EPSS 2.3%

    Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection with DrillHook giving an opport...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.