CVE-2025-62402 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag…
Medium CVSS: 5.4

CVE-2025-62402

API users via `/api/v2/dagReports` could perform Dag code execution in the context of the api-server if the api-server was deployed in the environment where Dag files were available.
Vendor
Apache
Product
Airflow
CWE
CWE-250
Yayın Tarihi
2025-10-30 10:15:35
Güncelleme
2025-11-04 16:51:02
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-250 Airflow MEDIUM Apache 2025

Referanslar

https://lists.apache.org/thread/vbzxnxn031wb998hsd7vqnvh4z8nx6rs http://www.openwall.com/lists/oss-security/2025/10/29/7