CVE-2023-35798

Input Validation vulnerability in Apache Software Foundation Apache Airflow ODBC Provider, Apache Software Foundation Apache Airflow MSSQL Provider.This vulnerability is considered low since it requires DAG code to use `get_sqlalchemy_connection` and someone with access to connection resources specifically updating the connection to exploit it. This issue affects Apache Airflow ODBC Provider: before 4.0.0; Apache Airflow MSSQL Provider: before 3.4.1. It is recommended to upgrade to a version that is not affected

• CWE-20

• https://github.com/apache/airflow/pull/31984Patch, Vendor Advisory
• https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pjMailing List, Vendor Advisory
• https://github.com/apache/airflow/pull/31984Patch, Vendor Advisory
• https://lists.apache.org/thread/951rb9m7wwox5p30tdvcfjxq8j1mp4pjMailing List, Vendor Advisory

Published

Jun 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-35791Vound Intella Connect 2.6.0.3 has an Open Redirect vulnerabi…6.1
• CVE-2023-35792Vound Intella Connect 2.6.0.3 is vulnerable to stored Cross-…6.1
• CVE-2023-35793An issue was discovered in Cassia Access Controller 2.1.1.23…8.8
• CVE-2023-35794An issue was discovered in Cassia Access Controller 2.1.1.23…8.8
• CVE-2023-35796A vulnerability has been identified in SINEMA Server V14 (Al…9
• CVE-2023-35797Improper Input Validation vulnerability in Apache Software F…9.8
• CVE-2023-35799Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 …5.5
• CVE-2023-3580Improper Handling of Additional Special Element in GitHub re…4.3
• CVE-2023-35800Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 …4.3
• CVE-2023-35801A directory traversal vulnerability in Safe Software FME Ser…8.1
• CVE-2023-35802IQ Engine before 10.6r1 on Extreme Network AP devices has a …9.8
• CVE-2023-35803IQ Engine before 10.6r2 on Extreme Network AP devices has a …9.8