CVE-2023-35797
2 advisories.
PyPI/apache-airflow-providers-apache-hive CVE-2023-35797: critical 9.8
Apache Airflow Hive Provider Beeline remote code execution with Principal
Action: Upgrade apache-airflow-providers-apache-hive to 6.1.1 or later.
pip install apache-airflow-providers-apache-hive==6.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.1 | - |
Fixed versions
| 6.1.1 |
Sources
- osv: GHSA-hg6c-qqcm-r79r
- https://nvd.nist.gov/vuln/detail/CVE-2023-35797
- https://github.com/apache/airflow/pull/31983
- https://github.com/apache/airflow/commit/6724eeb6210d5965937eaf9dae3e476eb30f8268
- https://github.com/apache/airflow
- https://lists.apache.org/thread/30y19ok07fw52x5hnkbhwqo3ho0wwc1y
- http://www.openwall.com/lists/oss-security/2023/07/12/3
CVE-2023-35797 · published · modified · JSON
PyPI/apache-airflow-providers-apache-hive CVE-2023-35797: critical 9.8
Apache Airflow Hive Provider Beeline remote code execution with Principal
Action: Upgrade apache-airflow-providers-apache-hive to 6.1.1 or later.
pip install apache-airflow-providers-apache-hive==6.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.1.1 | - |
Fixed versions
| 6.1.1 |
Sources
- osv: PYSEC-2026-273
- https://nvd.nist.gov/vuln/detail/CVE-2023-35797
- https://github.com/apache/airflow/pull/31983
- https://github.com/apache/airflow/commit/6724eeb6210d5965937eaf9dae3e476eb30f8268
- https://github.com/apache/airflow
- https://lists.apache.org/thread/30y19ok07fw52x5hnkbhwqo3ho0wwc1y
- http://www.openwall.com/lists/oss-security/2023/07/12/3
- https://pypi.org/project/apache-airflow-providers-apache-hive
- https://github.com/advisories/GHSA-hg6c-qqcm-r79r
CVE-2023-35797 · published · modified · JSON