Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-28746
8.1
HIGHCVSS v3
Published
March 14, 2024
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which they do not have permission to access. Users of Apache Airflow are recommended to upgrade to version 2.8.3 or newer to mitigate the risk associated with this vulnerability
apache/airflow
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows
GitHubApache Airflow - A platform to programmatically author, schedule, and monitor workflows>= 2.8.0, < 2.8.3NVD