CVE-2023-50783 (published 2023-12-21T09:28:47.746Z)
Apache Airflow, versions before 2.8.0, is affected by a vulnerability that allows an authenticated user without the variable edit permission, to update a variable.
This flaw compromises the integrity of variable management, potentially leading to unauthorized data modification.
Users are recommended to upgrade to 2.8.0, which fixes this issue
Affected products: Vendor: Apache Software Foundation
Product: Apache Airflow
Versions: 0