Known vulnerabilities in Apache Airflow ODBC Provider
Vendor:
Apache Foundation
Software:
Apache Airflow ODBC Provider
Software CPE:
cpe:2.3:a:apache_foundation:apache-airflow-providers-odbc:*:*:*:*:*:apache_airflow:*:*
Website:
https://www.apache.org
Total vulnerabilities:
2
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.7
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77969 - Improper Control of Generation of Code ('Code Injection') CVE-2023-34395 |
CWE-94 | Medium | 4.0.0 | 05.07.2023 |
SB2023070529 |
||
| #VU77968 - Improper input validation CVE-2023-35798 |
CWE-20 | Low | 4.0.0 | 05.07.2023 |
SB2023070530 |