All vulnerabilities

Servers and applications

CVE-2023-39508

Execution with Unnecessary Privileges, : Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Airflow.The "Run Task" feature enables authenticated user to bypass some of the restrictions put in place. It allows to execute code in the webserver context as well as allows to bypas limitation of access the user has to certain DAGs. The "Run…

Severity
High 8.8
Published
5 Aug 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2.6.0
Sources
NVD

Affected software

SoftwareAffected versions
Apache AirflowServers and applications · cpe:a:apache:airflow
  • Every version before 2.6.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-39508
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-39508