Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-25696 EUVD-2023-0680GHSA-9mwf-mw74-9cv5PYSEC-2026-272

Apache Airflow Hive Provider Beeline RCE

Published Feb 24, 2023 · Updated Oct 23, 2024 · Assigned by apache

Description

Improper Input Validation vulnerability in the Apache Airflow Hive Provider.

This issue affects Apache Airflow Hive Provider versions before 5.1.3.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Hive Provider < 5.1.3 5.1.3

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-apache-hive < 5.1.3 5.1.3 GHSA-9mwf-mw74-9cv5

References