Apache Airflow Apache Hive Provider vulnerabilities

2 known vulnerabilities in Apache Airflow Apache Hive Provider from Apache. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache…

  CVE-2023-37415Jul 13, 2023ApacheEPSS 1.59%

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Apache Hive Provider. Patching on top of CVE-2023-35797 Before 6.1.2 the proxy_user option can also inject semicolon. This issue affects Apache Airflow Apache Hive Provider: b

• 9.8 Critical severity

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive…

  CVE-2023-35797Jul 3, 2023ApacheEPSS 2.79%

  Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Apache Hive Provider: before 6.1.1. Before version 6.1.1 it was possible to bypass the security check to RCE via principal par