Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Apache Airflow ODBC Provider 4.0.0 Clear all filters
TI-2023-17886 CVE-2023-35798 · GHSA-q57w-826p-46jr

Airflow Apache ODBC and MSSQL Providers Arbitrary File Read Vulnerability

Priority LOW 23

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.01263 Published 2023-06-27 Fixed in 4.0.0, 3.4.1 CWE-20
TI-2023-17224 CVE-2023-34395 · GHSA-9766-v29c-4vm7

Apache Airflow ODBC Provider: Remote code execution vulnerability

Priority LOW 37

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in Apache Software Foundation Apache Airflow ODBC Provider.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00756 Published 2023-06-27 Fixed in 4.0.0 CWE-88