Package · PyPI

apache-airflow-providers-apache-sqoop

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 8.8

CVE-2023-27604

Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability

Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions…

Apache Software Foundation Apache Airflow Sqoop Provider apache-airflow-providers-apache-sqoop PyPI

Aug 28, 2023
Critical 9.8

CVE-2023-25693

Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.

Apache Software Foundation Apache Airflow Sqoop Provider apache-airflow apache-airflow-providers-apache-sqoop PyPI

Feb 24, 2023