CVE-2023-50783

published 2023-12-21

CVE-2023-50783: Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a…

medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I H A N

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable.
This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification.
Users are recommended to upgrade to 2.8.0, which fixes this issue

Affected

2 ranges

Vendor	Product	Version range	Fixed in
apache	airflow	< 2.8.0	2.8.0
apache_software_foundation	apache_airflow	< 2.8.0	2.8.0

CWE-284