CVE-2023-47037

We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.  Apache Airflow, versions before 2.7.3, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could have them alter details such as configuration parameters, start date, etc.  Users should upgrade to version 2.7.3 or later which has removed the vulnerability.

• CWE-863

• http://www.openwall.com/lists/oss-security/2023/11/12/1Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/33413Issue Tracking, Patch
• https://lists.apache.org/thread/04y4vrw1t2xl030gswtctc4nt1w90cb0Mailing List
• http://www.openwall.com/lists/oss-security/2023/11/12/1Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/33413Issue Tracking, Patch
• https://lists.apache.org/thread/04y4vrw1t2xl030gswtctc4nt1w90cb0Mailing List

Published

Nov 12, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47030An issue in NCR Terminal Handler v.1.5.1 allows a remote att…9.8
• CVE-2023-47031An issue in NCR Terminal Handler v.1.5.1 allows a remote att…9.8
• CVE-2023-47032Password Vulnerability in NCR Terminal Handler v.1.5.1 allow…9.8
• CVE-2023-47033MultiSigWallet 0xF0C99 was discovered to contain a reentranc…7.5
• CVE-2023-47034A vulnerability in UniswapFrontRunBot 0xdB94c allows attacke…7.5
• CVE-2023-47035RPTC 0x3b08c was discovered to not conduct status checks on …7.5
• CVE-2023-47038A vulnerability was found in perl 5.30.0 through 5.38.0. Thi…7.8
• CVE-2023-47039A vulnerability was found in Perl. This security issue occur…7.8
• CVE-2023-4704External Control of System or Configuration Setting in GitHu…4.9
• CVE-2023-47040Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (a…7.8
• CVE-2023-47041Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (a…7.8
• CVE-2023-47042Adobe Media Encoder version 24.0.2 (and earlier) and 23.6 (a…7.8