← Back to CVE List
CVE-2023-25693NVD
Vulnerability Summary
Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.
CVSS v3.1 Base Metrics — Score 9.8
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Affected & Patched Versions
- apache-airflow-providers-apache-sqoop < 3.1.1
Not provided by Private for this CVE.
External References
- https://nvd.nist.gov/vuln/detail/CVE-2023-25693
- https://github.com/apache/airflow/pull/29500
- https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-314.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow-providers-apache-sqoop/PYSEC-2026-275.yaml
- https://pypi.org/project/apache-airflow-providers-apache-sqoop
- https://github.com/advisories/GHSA-j69x-v4wc-3fpf