En bref
- CVE-2026-46745 est une vulnérabilité MOYENNE (CVSS 5.3) touchant apache-airflow-providers-fab, apache-airflow-providers-fab (apache).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.57%, plus élevée que 47.5% des vulnérabilités.
- Correctif : mettre à jour vers 3.6.4 ou plus récent.
Description
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP authentication until the provider can be updated.
NVD description
Apache Airflow FAB Auth Manager contains an LDAP filter injection vulnerability (CWE-90) that allows unauthenticated attackers to exfiltrate directory data or bypass authentication. Upgrade to apache-airflow-providers-fab 3.6.4 or later. If immediate upgrade is not possible, disable LDAP authentication until the provider can be updated.
Autres vulnérabilités de apache-airflow-providers-fab
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free