Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low since it requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which fixes this issue.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access
    the source code of a DAG to which they don't have access. This vulnerability is considered low since it
    requires an authenticated user to exploit it. Users are recommended to upgrade to version 2.8.1, which
    fixes this issue. (CVE-2023-50944)

ID	Name	Product	Family	Type	Severity
460997	Echo: apache-airflow: security update to 2.8.1rc1	Tenable Cloud Security	Echo Local Security Checks	Local	high
460997	Echo: apache-airflow: security update to 2.8.1rc1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
419401	SCA: security update for apache-airflow (GHSA-vm5m-qmrx-fw8w)	Tenable Cloud Security	SCA Checks	Local	high
419401	SCA: security update for apache-airflow (GHSA-vm5m-qmrx-fw8w)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2023-50944

high

Tenable Plugins

high

high

high

high