CVE Catalog
CVE-2023-35908
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk0.76%
50th percentile - higher than 50% of all known CVEs
Summary
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL.
Risk Assessment
Organizations may be exposed to the disclosure of sensitive data contained in DAGs, potentially leading to privacy and security breaches.
Recommendation
It is recommended to upgrade to a version that is not affected.
Original NVD description (English source)
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected