Apache Airflow OS Command Injection Vulnerability (CNVD-2022-18263)

Apache Airflow is an open source platform for creating, managing, and monitoring workflows from the Apache Foundation. The platform features scalable and dynamic monitoring. Apache Airflow is vulnerable to an operating system command injection vulnerability that exists due to incorrect input validation in certain sample dag. A remote, unauthenticated attacker could exploit the vulnerability to be able to pass specially crafted HTTP requests and execute arbitrary operating system commands on the target system.