Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-28710

Apache Airflow Spark Provider Arbitrary File Read via JDBC

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Airflow Spark Provider

Default version status: unaffected

  • 0 to < 4.0.1affected

References