CVE-2023-42663

Apache Airflow, versions before 2.7.2, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. Users of Apache Airflow are advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability.

• CWE-200

• http://www.openwall.com/lists/oss-security/2023/11/12/2Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/34315Patch
• https://lists.apache.org/thread/xj86cvfkxgd0cyqfmz6mh1bsfc61c6o9Mailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2023/11/12/2Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/34315Patch
• https://lists.apache.org/thread/xj86cvfkxgd0cyqfmz6mh1bsfc61c6o9Mailing List, Vendor Advisory

Published

Oct 14, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-42657 In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a dir…9.6
• CVE-2023-42658 Archive command in Chef InSpec prior to 4.56.58 and 5.22.29…7.8
• CVE-2023-42659 In WS_FTP Server versions prior to 8.7.6 and 8.8.4, an unre…8.8
• CVE-2023-42660 In Progress MOVEit Transfer versions released before 2021.1…8.8
• CVE-2023-42661JFrog Artifactory prior to version 7.76.2 is vulnerable to A…8.8
• CVE-2023-42662JFrog Artifactory versions 7.59 and above, but below 7.59.18…6.5
• CVE-2023-42664A post authentication command injection vulnerability exists…7.2
• CVE-2023-42665Rejected reason: This is unused.
• CVE-2023-42666 The affected product is vulnerable to an exposu…5.3
• CVE-2023-42667Improper isolation in the Intel(R) Core(TM) Ultra Processor …7.8
• CVE-2023-42668Incorrect default permissions in some onboard video driver s…6.7
• CVE-2023-42669A vulnerability was found in Samba's "rpcecho" development s…6.5