CVE-2023-28707 — Airflow Apache Drill Provider Arbitrary File Read Vulnerability

Description (CNA)

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider.This issue affects Apache Airflow Drill Provider: before 2.3.2.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow Drill Provider	affected 0 before 2.3.2

CWE

CWE-20

References

https://github.com/apache/airflow/pull/30215
https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtk
http://www.openwall.com/lists/oss-security/2023/04/07/1

ADP enrichment

CVE

No English description supplied.

https://github.com/apache/airflow/pull/30215
https://lists.apache.org/thread/dfoj7q1nd0vhhsl8fjg63z4j6mfmdxtk
http://www.openwall.com/lists/oss-security/2023/04/07/1

CISA-ADP

No English description supplied.

No references supplied.