CVE-2023-40272

Summary

CVE-2023-40272 is a vulnerability affecting versions of Apache Airflow Spark Provider prior to 4.1.3. An attacker can exploit this issue by passing malicious parameters during a connection setup, potentially granting unauthorized access to read files on the Airflow server. Upgrading to a more recent version is recommended to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.