What is CVE-2025-30473?

CVE-2025-30473 is a high-severity vulnerability in Apache Airflow_common_sql_provider, classified under SQL Injection. CVSS score: 8.8/10. Published 2025-04-07.

How severe is CVE-2025-30473?

High severity. CVSS v3 base score is 8.8 out of 10.

Is CVE-2025-30473 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SQL Injection in Apache Airflow_common_sql_provider

CVE-2025-30473

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended patte…

Vulnerability class: SQL Injection

EPSS: 0.008 (51.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Apache Airflow_common_sql_provider
Apache Software Foundation Airflow Common Sql Provider — versions 0

Weakness classification (CWE)

CWE-89 — SQL Injection

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

security@apache.org (Patch, patch, Issue Tracking)
security@apache.org (vendor-advisory, Mailing List, Vendor Advisory)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List, Third Party Advisory)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List)
af854a3a-2127-422b-91ae-364da2661108 (Mailing List)

Frequently asked questions

What is CVE-2025-30473?: CVE-2025-30473 is a high-severity vulnerability in Apache Airflow_common_sql_provider, classified under SQL Injection. CVSS score: 8.8/10. Published 2025-04-07.
How severe is CVE-2025-30473?: High severity. CVSS v3 base score is 8.8 out of 10.
Is CVE-2025-30473 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.