CVE-2023-47265 json
Apache Airflow: DAG Params alllow to embed unchecked Javascript
published 2023-12-21 2 y ago modified 2026-09-08 2 mo ago also BIT-airflow-2023-47265 , EUVD-2023-0032 , GHSA-pxch-wr7m-rwxj , PYSEC-2023-264
- cvss
- 5.4
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.3%
- EPSS 1.3% chance of exploitation in 30 days, percentile 71%
- public exploits
- 0
- none known
Summary
Apache Airflow, versions 2.6.0 through 2.7.3 has a stored XSS vulnerability that allows a DAG author to add an unbounded and not-sanitized javascript in the parameter description field of the DAG. This Javascript can be executed on the client side of any of the user who looks at the tasks in the browser sandbox. While this issue does not allow to exit the browser sandbox or manipulation of the server-side data - more than the DAG author already has, it allows to modify what the user looking at the DAG details sees in the browser - which opens up all kinds of possibilities of misleading other users.
Users of Apache Airflow are recommended to upgrade to version 2.8.0 or newer to mitigate the risk associated with this vulnerability
Patch / fix
- pypi apache-airflow 2.8.0b1
- bitnami airflow 2.7.4
- Apache Software Foundation Apache Airflow 2.8.0
- github.com/apache/airflow@0b99560 commit
- github.com/apache/airflow#35460 pull request
Exploit prediction
1.34% chance of exploitation in the next 30 days, higher than 71% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| GitHub | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| NVD | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
| OSV | 3.1 | 5.4 | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | apache-airflow | >=2.6.0, <2.8.0b1 |
2.8.0b1 |
| bitnami | airflow | >=2.6.0, <2.7.4 |
2.7.4 |
Affected products
- Apache Software Foundation Apache Airflow
Classification
- Weakness
-
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
-
github.com
/apache/airflow/pull/35460
patch, web
-
github.com
/apache/airflow/commit/0b995602e6e5894ee31625a4dd0e6aa255d2a651
web
-
lists.apache.org
/thread/128f3zl375vb1qv93k82zhnwkpl233pr
vendor-advisory, web, mailing-list, third-party-advisory, advisory, article
-
openwall.com
/lists/oss-security/2023/12/21/2
web, mailing-list, third-party-advisory, advisory, article
-
nvd.nist.gov
/vuln/detail/CVE-2023-47265
advisory, web
-
github.com
/apache/airflow
package
-
github.com
/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2023-264.yaml
web
-
github.com
/advisories/GHSA-pxch-wr7m-rwxj
advisory
Sources
- CVE List CVE-2023-47265
- GitHub Advisory GHSA-pxch-wr7m-rwxj
- NVD CVE-2023-47265
- OSV BIT-airflow-2023-47265
- OSV PYSEC-2023-264
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.