Headline

GHSA-ffj9-4crc-q7wf: Apache Airflow Spark Provider vulnerable to improper input validation

Apache Software Foundation Apache Airflow Spark Provider before 4.0.1 is vulnerable to improper input validation because the host and schema of JDBC Hook can contain / and ? which is used to denote the end of the field.

1 year ago

ghsa

Open in Source

#apache #git

Apache Airflow Spark Provider vulnerable to improper input validation

Moderate severity GitHub Reviewed Published Apr 7, 2023 to the GitHub Advisory Database • Updated Apr 7, 2023

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1.

1 year ago

CVE

Open in Source

#vulnerability #apache