CVE-2023-28707 Airflow Apache Drill Provider Arbitrary File Read Vulnerability

2023-04-0714:53:24

CWE-20

apache

www.cve.org

cve-2023-28707

apache airflow

apache drill provider

improper input validation

0.002 Low

EPSS

Percentile

59.0%

JSON

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow Drill Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.3.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]