CVE Catalog
CVE-2023-36543
MediumCVSS 6.5Exploitation Probability (EPSS)
Elevated risk1.16%
63th percentile - higher than 63% of all known CVEs
Summary
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang.
Risk Assessment
The organization may experience service availability issues, leading to disruptions in system operations.
Recommendation
It is recommended to upgrade to a version that is not affected.
Original NVD description (English source)
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected