Описание
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| airflow | itp | package |
Связанные уязвимости
CVSS3: 4.6
nvd
10 месяцев назад
User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.
CVSS3: 4.6
github
10 месяцев назад
Apache Airflow's create action can upsert existing Pools/Connections/Variables