Miembros de
Boletines de Vulnerabilidades |
CVE-2025-27018 |
|
| Software afectado | APACHE |
|
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider. When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue. |
|
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-27018 | |
