Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-35908

Apache Airflow: Access to DAGs without relevant permission

Description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Airflow

Default version status: unaffected

  • 0 to < 2.6.3affected

References