CVE-2023-25696

Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@apache.org

Published

2023-02-24

Last modified

2024-10-23

Weaknesses

CWE-20

Affected products

• Apache-airflow-providers-apache-hive (Apache)
• Apache Airflow Hive Provider (Apache Software Foundation)

References

• https://github.com/apache/airflow/pull/29502
• https://lists.apache.org/thread/99g0qm56wmgdxmbtdsvhj4rdnxhpzpml