critical9.8
CVE-2023-25693
Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.
Impact
Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | apache-airflow-providers-apache-sqoop | < 3.1.1 | 3.1.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Apache-Airflow-Providers-Apache-Sqoop | before 3.1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-j69x-v4wc-3fpf
- https://nvd.nist.gov/vuln/detail/CVE-2023-25693
- https://github.com/apache/airflow/pull/29500
- https://lists.apache.org/thread/79qn8g5xbq036f8crb115obvr22l52q4
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-314.yaml
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow-providers-apache-sqoop/PYSEC-2026-275.yaml
- https://pypi.org/project/apache-airflow-providers-apache-sqoop