CVE-2023-36543CWE-1333

Apache Airflow: ReDoS via dags function

published July 12, 2023

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01568 · 75.2th percentile
Weakness
CWE-1333 · Inefficient Regular Expression Complexity
Published
2023-07-12T09:17Z
EPSS history
Timeline
  • 12 JUL 09:17Z
    Apache Airflow: ReDoS via dags function
    cvelistv5