{"metadata": {"vulnerability": "CVE-2023-50943", "count": 26, "kinds": {"milestone": 7, "sighting": 4, "kev": 0, "other": 15}}, "data": [{"timestamp": "2023-12-16T16:02:36.817Z", "date_only": false, "value": "2023-12-16T16:02:36.817Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-50943", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-17T06:01:18.193Z", "date_only": false, "value": "2023-12-17T06:01:18.193913Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50943", "record": "GSD-2023-50943", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-24T12:57:07.287Z", "date_only": false, "value": "2024-01-24T12:57:07.287Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-50943", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-24T13:00:09.773Z", "date_only": false, "value": "2024-01-24T13:00:09.773Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apache", "record": "CVE-2023-50943", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-24T13:15:00Z", "date_only": false, "value": "2024-01-24T13:15:00+00:00", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2024-13", "record": "PYSEC-2024-13", "field": "published"}, {"timestamp": "2024-01-24T13:15:07Z", "date_only": false, "value": "2024-01-24T13:15:07Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-C3C6-F2WW-XFR2", "record": "GHSA-C3C6-F2WW-XFR2", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-24T13:15:07.953Z", "date_only": false, "value": "2024-01-24T13:15:07.953", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50943", "record": "FKIE_CVE-2023-50943", "field": "published"}, {"timestamp": "2024-01-24T13:15:07.953Z", "date_only": false, "value": "2024-01-24T13:15:07.953", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-50943", "record": "GSD-2023-50943", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-24T14:26:47Z", "date_only": false, "value": "2024-01-24T14:26:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/172780", "record": "CVE-2023-50943", "field": "creation_timestamp", "uuid": "561a7a0b-7c7b-4195-a1ac-64f4e2aa6fbb", "content": "https://ift.tt/heYJ3Ug\nCVE-2023-50943", "url": "https://t.me/ctinow/172780"}, {"timestamp": "2024-01-24T15:30:30Z", "date_only": false, "value": "2024-01-24T15:30:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-C3C6-F2WW-XFR2", "record": "GHSA-C3C6-F2WW-XFR2", "field": "published"}, {"timestamp": "2024-01-24T16:22:57.352Z", "date_only": false, "value": "2024-01-24T16:22:57.352530+00:00", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2024-13", "record": "PYSEC-2024-13", "field": "modified"}, {"timestamp": "2024-01-26T23:31:34Z", "date_only": false, "value": "2024-01-26T23:31:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/3115", "record": "CVE-2023-50943", "field": "creation_timestamp", "uuid": "3558bab9-a3c7-45c8-bcb7-bb2a09b0f465", "content": "#ExploitObserverAlert\n\nCVE-2023-50943\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2023-50943. Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of \"enable_xcom_pickling=False\" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.", "url": "https://t.me/arpsyndicate/3115"}, {"timestamp": "2024-01-29T00:00:00Z", "date_only": true, "value": "2024-01-29", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-26531", "record": "CNVD-2024-26531", "field": "submitTime"}, {"timestamp": "2024-01-30T22:57:59.310Z", "date_only": false, "value": "2024-01-30T22:57:59.310", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-50943", "record": "GSD-2023-50943", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-02-17T22:26:34Z", "date_only": false, "value": "2024-02-17T22:26:34.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/187059", "record": "CVE-2023-50943", "field": "creation_timestamp", "uuid": "6e359c6a-3afb-4fa6-96ba-d57be997b7f2", "content": "https://ift.tt/uTB4gpN\nCVE-2023-50943 | Apache Airflow up to 2.8.0 Xcom Data deserialization", "url": "https://t.me/ctinow/187059"}, {"timestamp": "2024-03-06T10:50:50.999Z", "date_only": false, "value": "2024-03-06T10:50:50.999Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2023-50943", "record": "BIT-AIRFLOW-2023-50943", "field": "published"}, {"timestamp": "2024-06-13T00:00:00Z", "date_only": true, "value": "2024-06-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-26531", "record": "CNVD-2024-26531", "field": "openTime"}, {"timestamp": "2024-08-02T22:23:43.928Z", "date_only": false, "value": "2024-08-02T22:23:43.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-50943", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-13T19:33:15Z", "date_only": false, "value": "2025-02-13T19:33:15Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-C3C6-F2WW-XFR2", "record": "GHSA-C3C6-F2WW-XFR2", "field": "modified"}, {"timestamp": "2025-02-13T20:13:02Z", "date_only": false, "value": "2025-02-13T20:13:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4335", "record": "CVE-2023-50943", "field": "creation_timestamp", "uuid": "6f1d3833-39fe-4df0-8911-f10c1bf4dbad", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50943\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of \"enable_xcom_pickling=False\" configuration setting resulting in poisoned data after XCom deserialization. This vulnerability is considered low since it requires a DAG author to exploit it. Users are recommended to upgrade to version 2.8.1 or later, which fixes this issue.\n\ud83d\udccf Published: 2024-01-24T15:30:30Z\n\ud83d\udccf Modified: 2025-02-13T19:33:15Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-50943\n2. https://github.com/apache/airflow/pull/36255\n3. https://github.com/apache/airflow/commit/2c4c5bc604e9ab0cc1e98f7bee7d31d566579462\n4. https://github.com/apache/airflow\n5. https://github.com/pypa/advisory-database/tree/main/vulns/apache-airflow/PYSEC-2024-13.yaml\n6. https://lists.apache.org/thread/fx278v0twqzxkcts70tc04cp3f8p56pn\n7. http://www.openwall.com/lists/oss-security/2024/01/24/4", "url": "https://t.me/DarkWebInformer_CVEAlerts/4335"}, {"timestamp": "2025-05-08T17:27:45.578Z", "date_only": false, "value": "2025-05-08T17:27:45.578372Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-50943", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-05-08T17:27:45.578Z", "date_only": false, "value": "2025-05-08T17:27:45.578372Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50943", "record": "FKIE_CVE-2023-50943", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-05-30T14:16:49.346Z", "date_only": false, "value": "2025-05-30T14:16:49.346Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-50943", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-05-30T14:16:49.346Z", "date_only": false, "value": "2025-05-30T14:16:49.346Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-50943", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T06:40:16.990Z", "date_only": false, "value": "2026-06-17T06:40:16.990", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-50943", "record": "FKIE_CVE-2023-50943", "field": "lastModified"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-AIRFLOW-2023-50943", "record": "BIT-AIRFLOW-2023-50943", "field": "modified"}]}