CVE-2023-25693 Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

2023-02-2411:48:11

CWE-20

apache

www.cve.org

apache airflow sqoop

input validation

remote code execution

vulnerability

cve-2023-25693

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

58.0%

JSON

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.

This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow Sqoop Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "3.1.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]