CVE-2023-47037

Summary

CVE-2023-47037: A newly discovered vulnerability affects Apache Airflow versions before 2.7.3. Authenticated and DAG-view authorized users can alter some DAG run detail values when submitting notes, potentially changing configuration parameters and start dates. This issue was previously marked as fixed in CVE-2023-40611, but it was not fully addressed. Airflow users are advised to upgrade to version 2.7.3 or later to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.