Skip to content
OpenAdvisories
High · 7.5 CVE-2023-28707 EUVD-2023-0028GHSA-85pf-r4c7-3j9rPYSEC-2023-3PYSEC-2026-1136

Airflow Apache Drill Provider Arbitrary File Read Vulnerability

Published Apr 7, 2023 · Updated Feb 13, 2025 · Assigned by apache

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Drill Provider < 2.3.2 2.3.2

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow < 2.3.2 2.3.2 PYSEC-2023-3
PyPI apache-airflow-providers-apache-drill < 2.3.2 2.3.2 GHSA-85pf-r4c7-3j9r

References