CVE-2022-24288
Apache Airflow: RCE in example DAGs
Résumé
Apache Airflow: RCE in example DAGs
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
airflow
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"2.2.4"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- web lists.apache.org