Apache Software Foundation Apache Airflow Spark Provider
4 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2023-40195 | < 4.1.3 | Apache Airflow Spark Provider Deserialization Vulnerability RCE | HIGH 8.8 | 1.9 % | ||
| CVE-2023-40272 | < 4.1.3 | Apache Airflow Spark Provider Arbitrary File Read via JDBC | HIGH 7.5 | 2.1 % | ||
| CVE-2023-28710 | < 4.0.1 | Apache Airflow Spark Provider Arbitrary File Read via JDBC | HIGH 7.5 | 2.2 % | ||
| CVE-2022-40954 | unspecified – < 4.0.0 | Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files | MEDIUM 5.5 | 1.4 % |