← Back to CVEs
CVE-2023-25693
CRITICAL9.8
Description
Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.
CVE Details
CVSS v3.1 Score9.8
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published2/24/2023
Last Modified2/13/2025
Sourcenvd
Honeypot Sightings0
Affected Products
apache:apache-airflow-providers-apache-sqoop
Weaknesses (CWE)
CWE-20
References
https://github.com/apache/airflow/pull/29500(security@apache.org)
https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4(security@apache.org)
https://github.com/apache/airflow/pull/29500(af854a3a-2127-422b-91ae-364da2661108)
https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.