CVE-2024-28746

Published: 2024-03-14T09:15Z

Last Modified: 2025-03-20T19:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Apache Airflow, versions 2.8.0 through 2.8.2, has a vulnerability that allows an authenticated user with limited permissions to access resources such as variables, connections, etc from the UI which they do not have permission to access. Users of Apache Airflow are recommended to upgrade to version 2.8.3 or newer to mitigate the risk associated with this vulnerability > MITRE Terms of Use apply – see LICENSE‑MITRE.txt