deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30921
Published: 2023-07-12
Description: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30922
Published: 2023-07-12
Description: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30923
Published: 2023-07-12
Description: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30924
Published: 2023-07-12
Description: In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30925
Published: 2023-07-12
Description: In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30926
Published: 2023-07-12
Description: In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30927
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30928
Published: 2023-07-12
Description: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30929
Published: 2023-07-12
Description: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30930
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30931
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30932
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30933
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30934
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30935
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30936
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30937
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30938
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30939
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30940
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30941
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-30942
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-32788
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-32789
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33879
Published: 2023-07-12
Description: In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33880
Published: 2023-07-12
Description: In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 3.3 (LOW)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33881
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33882
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33883
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33884
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33885
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33886
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33887
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33888
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33889
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33890
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33891
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33892
Published: 2023-07-12
Description: In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33893
Published: 2023-07-12
Description: In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33894
Published: 2023-07-12
Description: In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33895
Published: 2023-07-12
Description: In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33896
Published: 2023-07-12
Description: In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33897
Published: 2023-07-12
Description: In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33898
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33899
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33900
Published: 2023-07-12
Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33901
Published: 2023-07-12
Description: In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33902
Published: 2023-07-12
Description: In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33903
Published: 2023-07-12
Description: In FM service, there is a possible missing params check.  This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33904
Published: 2023-07-12
Description: In hci_server, there is a possible out of bounds read due to a missing bounds check.  This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-33905
Published: 2023-07-12
Description: In iwnpi server, there is a possible out of bounds write due to a missing bounds check.  This could lead to local denial of service with System execution privileges needed.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073; https://www.unisoc.com/en_us/secy/announcementDetail/[PII_REDACTED]08259073
CVE: CVE-2023-3106
Published: 2023-07-12
Description: A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG_GETSA, XFRM_MSG_GETPOLICY type message, and the DUMP flag is set and can cause a denial of service or possibly another unspecified impact. Due to the nature of the flaw, privilege escalation cannot be fully ruled out, although it is unlikely.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-476, CWE-476
References: https://access.redhat.com/security/cve/CVE-2023-3106; https://bugzilla.redhat.com/show_bug.cgi?id=2221501; https://github.com/torvalds/linux/commit/1ba5bf993c6a3142e18e68ea6452b347f9cb5635
CVE: CVE-2022-42009
Published: 2023-07-12
Description: SpringEL injection in the server agent in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7.

CVSS Score: 8.0 (HIGH)
CWE: CWE-917
References: https://lists.apache.org/thread/6xf477ttz1oxmg0bx0tpdoz2mlqd7sbc; https://lists.apache.org/thread/6xf477ttz1oxmg0bx0tpdoz2mlqd7sbc
CVE: CVE-2022-45855
Published: 2023-07-12
Description: SpringEL injection in the metrics source in Apache Ambari version 2.7.0 to 2.7.6 allows a malicious authenticated user to execute arbitrary code remotely. Users are recommended to upgrade to 2.7.7.

CVSS Score: 8.0 (HIGH)
CWE: CWE-917
References: https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1; https://lists.apache.org/thread/302c4hwfjy9lx63jrbhcdx948pxc54l1
CVE: CVE-2022-46651
Published: 2023-07-12
Description: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the vulnerability.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/apache/airflow/pull/32309; https://lists.apache.org/thread/n45h3y82og125rnlgt6rbm9szfb6q24d; https://github.com/apache/airflow/pull/32309
CVE: CVE-2023-22887
Published: 2023-07-12
Description: Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/apache/airflow/pull/32293; https://lists.apache.org/thread/rxddqs76r6rkxsg1n24d029zys67qwwo; https://github.com/apache/airflow/pull/32293