CPE Details
Apache Software Foundation Apache Airflow Providers MySQL 2.2.2
2.2.2
2023-05-22
11h27 +00:00
11h27 +00:00
2023-05-22
12h30 +00:00
12h30 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:apache:apache-airflow-providers-mysql:2.2.2:*:*:*:*:*:*:*
Informations
Vendor
apacheProduct
apache-airflow-providers-mysqlVersion
2.2.2Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue. | 6.3 |
Medium |
||
| Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0. | 9.8 |
Critical |
