Vulnerability · Published Jul 12, 2023 · Assigned by apache

CVE-2023-22887Apache Airflow path traversal by authenticated user

Medium 6.5

In plain English

A medium-severity path traversal in Apache Airflow from Apache Software Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 78% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)1.8%top 21.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
PyPI	apache-airflow	2.6.3	GHSA-ggwr-4vr8-g7wv
PyPI	apache-airflow	2.6.3	PYSEC-2023-104

Affected products (as reported)

Vendor	Product	Versions
Apache Software Foundation	Apache Airflow	0 – before 2.6.3

Weakness: CWE-22

References

https://github.com/apache/airflow/pull/32293 patch
https://lists.apache.org/thread/rxddqs76r6rkxsg1n24d029zys67qwwo vendor-advisory