Apache Airflow Spark Provider

3 results · Clear filters · Feed

• High 8.8
  CVE-2023-40195

  Apache Airflow Spark Provider Deserialization Vulnerability RCE

  Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider. When the Apache Spark provider is installed on an Airflow deployment, an Airflow user that i…

  Apache Software Foundation Apache Airflow Spark Provider apache-airflow-providers-apache-spark PyPI
  Aug 28, 2023
• High 7.5
  CVE-2023-40272

  Apache Airflow Spark Provider Arbitrary File Read via JDBC

  Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade…

  Apache Software Foundation Apache Airflow Spark Provider apache-airflow-providers-apache-spark PyPI
  Aug 17, 2023
• High 7.5
  CVE-2023-28710

  Apache Airflow Spark Provider Arbitrary File Read via JDBC

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

  Apache Software Foundation Apache Airflow Spark Provider apache-airflow-providers-apache-spark PyPI
  Apr 7, 2023