Apache Software Foundation Apache Airflow Smtp Provider vulnerabilities

1 known vulnerability affecting apache_software_foundation/apache_airflow_smtp_provider.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-39441MEDIUMCVSS 5.9fixed in 1.302023-08-23

CVE-2023-39441 [MEDIUM] CWE-295 CVE-2023-39441: Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Air Apache Airflow SMTP Provider before 1.3.0, Apache Airflow IMAP Provider before 3.3.0, and Apache Airflow before 2.7.0 are affected by the Validation of OpenSSL Certificate vulnerability. The default SSL context with SSL library did not check a server's X.509 certificate. Instead, the code accepted any certificate, which could result in the disclosu