Threats tagged 'ghsa-x5pm-h33q-cjrw'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2024-25141Apache airflow providers mongo · Improper Certificate Validation in apache airflow mongo hook Critical9.12024-02-20GCVE DatabaseCVE-2024-25141 Apache Airflow providers mongo hook versions prior to 4.0.0 improperly validate SSL certificates when SSL is enabled due to default 'allow_insecure' settings. This undocumented behavior allows connections without proper certificate validation, potentially enabling man-in-the-middle attacks. The issue is fixed in version 4.0.0. Vulnerability CWE-295 #ghsa-x5pm-h33q-cjrw #pypi	GCVE Database	2024-02-20

Page 1 of 1