ZeroHour

CVE-2025-62503

CVSS 3.1
4.6 medium
EPSS
<1%p34
Published
()
Modified
Description

User with CREATE and no UPDATE privilege for Pools, Connections, Variables could update existing records via bulk create API with overwrite action.

Vendors
apache
Products
airflow
Weakness
CWE-250
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.