CVE-2023-25696Critical· 9.8▾ MidnightApache Airflow Hive Provider Improper Input Validation vulnerability
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
2.0%
Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.
apache-airflow-providers-apache-hive < 5.1.3Upgrade to a patched release:
apache-airflow-providers-apache-hive 5.1.3Connected by shared product, vendor, weakness, or advisory.
CVE-2023-35797Critical· 9.8Apache Airflow Hive Provider Beeline remote code execution with Principal
CVE-2023-28706Critical· 9.8Apache Airflow Hive Provider vulnerable to code injection
CVE-2022-46421Critical· 9.8Apache Airflow Hive Provider vulnerable to Command Injection
CVE-2022-41131High· 7.8OS Command Injection in Apache Airflow
CVE-2023-37415High· 8.8Apache Airflow Apache Hive Provider Improper Input Validation vulnerability
CVE-2023-25693Critical· 9.8Apache Airflow Sqoop Provider Improper Input Validation vulnerability