CVE-2023-35797

Summary

CVE-2023-35797: A critical vulnerability has been identified in the Apache Software Foundation's Apache Airflow Hive Provider. This issue, which affects versions before 6.1.1, involves improper input validation leading to Remote Code Execution (RCE) via the principal parameter. To exploit this vulnerability, an attacker must have access to modify connection details. It is strongly advised to update the provider version to 6.1.1 to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.