critical9.8
CVE-2023-25696
Improper Input Validation vulnerability in the Apache Airflow Hive Provider.
Impact
Improper Input Validation vulnerability in the Apache Airflow Hive Provider. This issue affects Apache Airflow Hive Provider versions before 5.1.3.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | apache-airflow-providers-apache-hive | < 5.1.3 | 5.1.3 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Apache-Airflow-Providers-Apache-Hive | before 5.1.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-9mwf-mw74-9cv5
- https://nvd.nist.gov/vuln/detail/CVE-2023-25696
- https://github.com/apache/airflow/pull/29502
- https://lists.apache.org/thread/99g0qm56wmgdxmbtdsvhj4rdnxhpzpml
- https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow-providers-apache-hive/PYSEC-2026-272.yaml
- https://pypi.org/project/apache-airflow-providers-apache-hive