Skip to content
OpenAdvisories
High · 7.5 CVE-2023-28710 EUVD-2023-1288GHSA-ffj9-4crc-q7wfPYSEC-2026-1140

Apache Airflow Spark Provider Arbitrary File Read via JDBC

Published Apr 7, 2023 · Updated Oct 22, 2024 · Assigned by apache

Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Airflow Spark Provider < 4.0.1 4.0.1

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI apache-airflow-providers-apache-spark < 4.0.1 4.0.1 GHSA-ffj9-4crc-q7wf

References