CVE-2023-25692 Apache Airflow Google Provider: Google Cloud Sql Provider Denial Of Service

2023-02-2411:48:00

CWE-20

apache

www.cve.org

apache airflow

google provider

input validation

vulnerability

version 8.10.0

EPSS

0.002

Percentile

55.0%

JSON

Improper Input Validation vulnerability in the Apache Airflow Google Provider.

This issue affects Apache Airflow Google Provider versions before 8.10.0.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow Google Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "8.10.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]