CVE-2025-30473

HIGH EPSS 51.2%

Published Apr 7, 20251y ago · Modified Jun 17, 20262w ago

8.8 CVSS 3.1

High

Published Apr 7, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have. This issue affects Apache Airflow Common SQL Provider: before 1.24.1. Users are recommended to upgrade to version 1.24.1, which fixes the issue.

CVSS Details

Base Score

8.8

Exploitability

2.8

Impact

5.9

Vector string

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector Network

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability High

Threat Intelligence

EPSS Exploit Probability

51.2% percentile

Exploit & Patch Status

No Known Exploit

Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 1

Vendor	Product	Version	Range
apache	airflow_common_sql_provider	*	<1.24.1

References 6

openwall.com http://www.openwall.com/lists/oss-security/2025/04/04/2

Mailing ListThird Party Advisory
openwall.com http://www.openwall.com/lists/oss-security/2025/04/06/1

Mailing List
openwall.com http://www.openwall.com/lists/oss-security/2025/04/06/2

Mailing List
openwall.com http://www.openwall.com/lists/oss-security/2025/04/06/3

Mailing List
github.com https://github.com/apache/airflow/pull/48098

Issue TrackingPatch
lists.apache.org https://lists.apache.org/thread/53klkv790cylqcop0350w7nfq1y6h0t2

Mailing ListVendor Advisory

Remediation

github.com https://github.com/apache/airflow/pull/48098

Issue TrackingPatch