UpHeron
All vulnerabilities

Servers and applications

CVE-2025-62503

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

Severity
Medium 4.6
Published
30 Oct 2025
Last changed
8 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
3.1.1
Sources
NVD

Affected software

SoftwareAffected versions
Apache AirflowServers and applications · cpe:a:apache:airflow
  • From 3.0.0 before 3.1.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-62503
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62503