← back
CVE-2023-35908

Apache Airflow: Access to DAGs without relevant permission

EPSS 0.8%CWE-863
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →