CVE-2023-22886

HIGH

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s [Connection URL] parameters had no restrictions, which made it...

Affects 1 product across 1 vendor.

CVSS 3.18.8
EPSS1.5%
Percentile74th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-20: Improper Input Validation

Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.

Related Attack Patterns (CAPEC)
CAPEC-3 Using Leading 'Ghost' Character Sequences to Bypass Input Filters
via CWE-20
CAPEC-7 Blind SQL Injection
via CWE-20
CAPEC-8 Buffer Overflow in an API Call
via CWE-20
CAPEC-9 Buffer Overflow in Local Command-Line Utilities
via CWE-20
CAPEC-10 Buffer Overflow via Environment Variables
via CWE-20
Show all 51
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20
via CWE-20

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider allows for Remote Code Execution (RCE) attacks via unvalidated Connection URL parameters, affecting versions before 4.0.0.

BSID: BS-2023-GLOBAL-328970-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2023-22886?
Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider allows for Remote Code Execution (RCE) attacks via unvalidated Connection URL parameters, affecting versions before 4.0.0.
What is the CVSS score for CVE-2023-22886?
CVE-2023-22886 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 1.5%.
Is CVE-2023-22886 actively exploited?
No confirmed active exploitation of CVE-2023-22886 as of 2026-05-30.
How do I remediate CVE-2023-22886?
Priority: IMMEDIATE. Advisory: https://lists.apache.org/thread/ynbjwp4n0vzql0xzhog1gkp1ovncf8j3 PSIRT: [email protected]
What systems are affected by CVE-2023-22886?
CVE-2023-22886 affects Apache Apache-Airflow-Providers-Jdbc.
Vulnerability Details
CVE IDCVE-2023-22886
BSIDBS-2023-GLOBAL-328970-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published2023-06-29
Last Modified2024-11-21
ICS Relevance0%
Weakness (CWE)
Improper Input Validation
SourceNVD
Official Description

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow JDBC Provider. Airflow JDBC Provider Connection’s [Connection URL] parameters had no restrictions, which made it possible to implement RCE attacks via different type JDBC drivers, obtain airflow server permission. This issue affects Apache Airflow JDBC Provider: before 4.0.0.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by providing a maliciously crafted JDBC connection URL, which can lead to RCE on the Airflow server, potentially compromising the entire environment.

Exploitation Likelihood: HIGH

Affected Products
VendorProductAffected Versions
Apache Apache-Airflow-Providers-Jdbc < 4.0.0
Remediation
View Vendor Advisory →

Remediation Priority: IMMEDIATE

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 1205 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hashae96c7309dbbadf44ac0058f0e963141c679a37ee1994f59df4dce672320e0d13350da8d336f7951bdd962d3219ea3d4dfa310093689d54d5d883d4867e7368b
Related CVEs affecting Apache
CVE-2012-4501 10.0 Citrix Cloud.com CloudStack, and Apache CloudStack pre-release, allows remote... CVE-2012-2379 10.0 Apache CXF 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1, wh... CVE-1999-1293 10.0 mod_proxy in Apache 1.2.5 and earlier allows remote attackers to cause a deni... CVE-1999-1237 10.0 Multiple buffer overflows in smbvalid/smbval SMB authentication library, as u... CVE-2009-2412 10.0 Multiple integer overflows in the Apache Portable Runtime (APR) library and t...
View all Apache CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →