CVE-2023-28706

Advisory

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider before 6.0.0.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/apache/airflow/pull/30212
• https://lists.apache.org/thread/dl20xxd51xvlx0zzc0wzgxfjwgtbbxo3
• http://www.openwall.com/lists/oss-security/2023/04/07/2
• https://nvd.nist.gov/vuln/detail/CVE-2023-28706
• https://github.com/apache/airflow
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28706