Airflow Apache Drill Provider Arbitrary File Read Vulnerability

CVE-2023-28707

What is CVE-2023-28707?

An issue has been identified in the Apache Airflow Drill Provider that allows for improper input validation, potentially leading to unexpected behavior or vulnerabilities during its operation. This affects users running versions prior to 2.3.2. It is crucial for organizations using this tool to review their implementations and apply the necessary patch to mitigate any potential security risks. For more details and updates, users can refer to the official patch and advisory from Apache.

References