CVE-2023-50783

Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable. This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification. Users are recommended to upgrade to 2.8.0, which fixes this issue

• CWE-284

• http://www.openwall.com/lists/oss-security/2023/12/21/4Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/33932Patch
• https://lists.apache.org/thread/rs7cr3yp726mb89s1m844hy9pq7frgcnMailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/12/21/4Mailing List, Third Party Advisory
• https://github.com/apache/airflow/pull/33932Patch
• https://lists.apache.org/thread/rs7cr3yp726mb89s1m844hy9pq7frgcnMailing List, Third Party Advisory

Published

Dec 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-50778A cross-site request forgery (CSRF) vulnerability in Jenkins…8.8
• CVE-2023-50779Missing permission checks in Jenkins PaaSLane Estimate Plugi…4.3
• CVE-2023-5078A vulnerability was reported in some ThinkPad BIOS that coul…6.7
• CVE-2023-50780Apache ActiveMQ Artemis allows access to diagnostic informat…8.8
• CVE-2023-50781A flaw was found in m2crypto. This issue may allow a remote …7.5
• CVE-2023-50782A flaw was found in the python-cryptography package. This is…7.5
• CVE-2023-50784A buffer overflow in websockets in UnrealIRCd 6.1.0 through …7.5
• CVE-2023-50785Zoho ManageEngine ADAudit Plus before 7270 allows admin user…2.7
• CVE-2023-50786Dradis through 4.16.0 allows referencing external images (re…4.3
• CVE-2023-5079Lenovo LeCloud App improper input validation allows attacker…7.5
• CVE-2023-5080A privilege escalation vulnerability was reported in some Le…7.8
• CVE-2023-50803An issue was discovered in Samsung Mobile Processor, and Mod…5.3