CVE-2023-42781

Summary

CVE-2023-42781 is a newly disclosed vulnerability in Apache Airflow versions before 2.7.3. This issue grants authorized users, who have access to read specific DAGs, the ability to view information on task instances from other unrelated DAGs. Although this issue differs from CVE-2023-42663, it results in similar privacy concerns. To minimize the risk, it is recommended that Apache Airflow users upgrade to version 2.7.3 or later.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.