CVE-2023-28707

2023-04-0715:15:08

Google

osv.dev

apache airflow drill

input validation

vulnerability

apache software foundation

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

59.0%

JSON

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.

CPENameOperatorVersion
airfloweqproviders-apache-sqoop/2.0.0
airfloweqproviders-apache-beam/3.2.0rc1
airfloweqproviders-cloudant/2.0.1rc1
airfloweqproviders-influxdb/1.1.0
airfloweqproviders-samba/3.0.0rc1
airfloweqproviders-postgres/1.0.2rc1
airfloweqproviders-tableau/2.1.5
airfloweqproviders-papermill/1.0.2
airfloweqproviders-apache-druid/2.0.1
airfloweqproviders-cncf-kubernetes/2.0.1

Name	Operator	Version
airflow	eq	providers-apache-sqoop/2.0.0
airflow	eq	providers-apache-beam/3.2.0rc1
airflow	eq	providers-cloudant/2.0.1rc1
airflow	eq	providers-influxdb/1.1.0
airflow	eq	providers-samba/3.0.0rc1
airflow	eq	providers-postgres/1.0.2rc1
airflow	eq	providers-tableau/2.1.5
airflow	eq	providers-papermill/1.0.2
airflow	eq	providers-apache-druid/2.0.1
airflow	eq	providers-cncf-kubernetes/2.0.1