Vulnerability Details : CVE-2023-40195
Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.
When the Apache Spark provider is installed on an Airflow deployment, an Airflow user that is authorized to configure Spark hooks can effectively run arbitrary code on the Airflow node by pointing it at a malicious Spark server. Prior to version 4.1.3, this was not called out in the documentation explicitly, so it is possible that administrators provided authorizations to configure Spark hooks without taking this into account. We recommend administrators to review their configurations to make sure the authorization to configure Spark hooks is only provided to fully trusted users.
To view the warning in the docs please visit https://airflow.apache.org/docs/apache-airflow-providers-apache-spark/4.1.3/connections/spark.html
Products affected by CVE-2023-40195
- cpe:2.3:a:apache:airflow_spark_provider:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-40195
2.51%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 85 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-40195
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
134c704f-9b21-4f2e-91b3-4a467353bcc0 | 2025-04-23 |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2023-40195
-
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.Assigned by: security@apache.org (Secondary)
-
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.Assigned by: security@apache.org (Secondary)
References for CVE-2023-40195
-
https://lists.apache.org/thread/fzy95b1d6zv31j5wrx3znhzcscck2o24
CVE-2023-40195: Apache Airflow Spark Provider Deserialization Vulnerability RCE-Apache Mail ArchivesMailing List;Vendor Advisory
-
https://github.com/apache/airflow/pull/33233
Add tip on host settings for Spark provider by pankajkoti · Pull Request #33233 · apache/airflow · GitHubPatch
Jump to