CVE-2023-25691 — Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution

CVE-2023-25691

Apache Airflow Google Provider: Google Cloud Sql Provider Remote Command Execution PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow Google Provider	affected 0 before 8.10.0

CWE

CWE-20

References

https://github.com/apache/airflow/pull/29497
https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy

ADP enrichment

CVE

No English description supplied.

https://github.com/apache/airflow/pull/29497
https://lists.apache.org/thread/zdr8ovfttbh7kj0lydgcw88tbt2nmkcy

CISA-ADP

No English description supplied.

No references supplied.