[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUm6ON4QvXLaRau0W7XDwWHaejPI51zGfPVH4HZlg1ME":3,"g5a-risk:CVE-2023-40195":117},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":59,"weaknesses":60,"weaknessesCount":75,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":112,"notableEvents":113},"CVE-2023-40195","What is CVE-2023-40195?","Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark Provider.\n\nWhen the Apache Spark provider is installed on an Airflow deployment, an Airflow user that is authorized to configure Spark hooks can effectively run arbitrary code on the Airflow node by pointing it at a malicious Spark server. Prior to version 4.1.3, this was not called out in the documentation explicitly, so it is possible that administrators provided authorizations to configure Spark hooks without taking this into account. We recommend administrators to review their configurations to make sure the authorization to configure Spark hooks is only provided to fully trusted users.\n\nTo view the warning in the docs please visit  https:\u002F\u002Fairflow.apache.org\u002Fdocs\u002Fapache-airflow-providers-apache-spark\u002F4.1.3\u002Fconnections\u002Fspark.html","Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apache Airflow Spark ...","2023-08-28T08:15:14.797","2025-04-23T17:16:39.25",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.01413,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"apache","airflow_spark_provider","*","cpe:2.3:a:apache:airflow_spark_provider:*:*:*:*:*:*:*:*",1,[44,49,55,57],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fgithub.com\u002Fapache\u002Fairflow\u002Fpull\u002F33233","GitHub",[48],"Patch",{"url":50,"source":51,"tags":52},"https:\u002F\u002Flists.apache.org\u002Fthread\u002Ffzy95b1d6zv31j5wrx3znhzcscck2o24","Apache",[53,54],"Mailing List","Vendor Advisory",{"url":45,"source":46,"tags":56},[48],{"url":50,"source":51,"tags":58},[53,54],4,[61,69],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-502","Deserialization of Untrusted Data","The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.","It is often convenient to serialize objects for communication or to save them for later use. However, deserialized data or code can often be modified without using the provided accessor functions if it does not use cryptography to protect itself. Furthermore, any cryptography would still be client-side security -- which is a dangerous security assumption.\nData that is untrusted can not be trusted to be well-formed.\nWhen developers place no restrictions on \"gadget chains,\" or series of instances and method invocations that can self-execute during the deserialization process (i.e., before the object is returned to the caller), it is sometimes possible for attackers to leverage them to perform unauthorized actions, like generating a shell.","Draft","Base","Simple",{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":67,"structure":68},"CWE-829","Inclusion of Functionality from Untrusted Control Sphere","The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.","When including third-party functionality, such as a web widget, library, or other source of functionality, the product must effectively trust that functionality. Without sufficient protection mechanisms, the functionality could be malicious in nature (either by coming from an untrusted source, being spoofed, or being modified in transit from a trusted source). The functionality might also contain its own weaknesses, or grant access to additional functionality and state information that should be kept private to the base system, such as system state information, sensitive application data, or the DOM of a web application.\nThis might lead to many different consequences depending on the included functionality, but some examples include injection of malware, information exposure by granting excessive privileges or permissions to the untrusted functionality, DOM-based XSS vulnerabilities, stealing user's cookies, or open redirect to malware (CWE-601).","Incomplete",2,false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2023-40195? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-40195, a high severity cyber security vulnerability from 2023. Deserialization of Untrusted Data, Inclusion of Functionali...","CVE-2023-40195, CVE-2023-40195 vulnerability, CVE-2023-40195 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, apache security, airflow_spark_provider vulnerability","\u002Fwhat-is\u002Fcve-2023-40195",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-40195","Cybersecurity","CVE-2023-40195, CVE-2023-40195 vulnerability, CVE-2023-40195 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":111,"VersionEndIncluding":26},"B4100137-C334-48A8-9C92-005AAF650B46","4.1.3",[],[],{"lastModified":11,"cacheTime":115,"version":116},1793214204758,"2.0",{"score":118,"band":119,"action":120,"scoredAt":121},49,"Medium","Plan remediation","2026-07-01T10:30:59.53381+00:00"]