Filtered by vendor Apache Subscriptions
Filtered by product Apache-airflow-providers-jdbc Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-22886 1 Apache 1 Apache-airflow-providers-jdbc 2024-08-02 8.8 High
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s [Connection URL] parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission. This issue affects Apache Airflow JDBC Provider: before 4.0.0.