CVE-2023-28710
published 2023-04-07CVE-2023-28710: Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before…
PriorityP342high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
2.15%
80.1th percentile
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | apache-airflow-providers-apache-spark | < 4.0.1 | 4.0.1 |
| apache | apache-airflow-providers-apache-spark | >= 0 < 4.0.1 | 4.0.1 |
| apache_software_foundation | apache_airflow_spark_provider | < 4.0.1 | 4.0.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Apache Airflow Spark Provider vulnerable to improper input validation
osv·2023-04-07
CVE-2023-28710 [HIGH] Apache Airflow Spark Provider vulnerable to improper input validation
Apache Airflow Spark Provider vulnerable to improper input validation
Apache Software Foundation Apache Airflow Spark Provider before 4.0.1 is vulnerable to improper input validation because the host and schema of JDBC Hook can contain `/` and `?` which is used to denote the end of the field.
GHSA
Apache Airflow Spark Provider vulnerable to improper input validation
ghsa·2023-04-07
CVE-2023-28710 [HIGH] CWE-20 Apache Airflow Spark Provider vulnerable to improper input validation
Apache Airflow Spark Provider vulnerable to improper input validation
Apache Software Foundation Apache Airflow Spark Provider before 4.0.1 is vulnerable to improper input validation because the host and schema of JDBC Hook can contain `/` and `?` which is used to denote the end of the field.
No detection rules found.
No public exploits indexed.
http://www.openwall.com/lists/oss-security/2023/04/07/3https://github.com/apache/airflow/pull/30223https://lists.apache.org/thread/lb9w9114ow00h2nkn8bjm106v5x1p1d2http://www.openwall.com/lists/oss-security/2023/04/07/3https://github.com/apache/airflow/pull/30223https://lists.apache.org/thread/lb9w9114ow00h2nkn8bjm106v5x1p1d2
2023-04-07
Published