Skip to content
OpenAdvisories
Critical · 9.8 CVE-2023-28706 EUVD-2023-1206GHSA-5cvg-9pp5-mxcjPYSEC-2026-271

Apache Airflow Hive Provider Beeline Remote Command Execution

Published Apr 7, 2023 · Updated Oct 22, 2024 · Assigned by apache

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 6.0.0.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Hive Provider < 6.0.0 6.0.0

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-apache-hive < 6.0.0 6.0.0 GHSA-5cvg-9pp5-mxcj

References