CVE-2023-42663

Summary

CVE-2023-42663 is a newly discovered vulnerability in Apache Airflow versions prior to 2.7.2. This issue grants authorized users, who have access to read certain DAGs, the ability to view information about task instances in other unrelated DAGs. This cross- DAG information disclosure poses a potential security risk. To mitigate this vulnerability, it is recommended that Apache Airflow users upgrade to version 2.7.2 or newer as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.