Lucene search

CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow

🗓️ 21 Jan 2023 13:49:02Reported by apacheType

Arbitrary file read vulnerability in Apache Airflow MySQL Provide

Reporter	Title	Published	Views	Family All 10
OSV	CVE-2023-22884	21 Jan 202314:15	–	osv
OSV	Command Injection in Apache Airflow and Apache Airflow MySQL Provider	21 Jan 202315:30	–	osv
OSV	BIT-airflow-2023-22884	6 Mar 202410:55	–	osv
CVE	CVE-2023-22884	21 Jan 202314:15	–	cve
GithubExploit	Exploit for Command Injection in Apache Airflow	29 Jul 202309:26	–	githubexploit
GithubExploit	Exploit for Command Injection in Apache Airflow	29 Jul 202309:26	–	githubexploit
Github Security Blog	Command Injection in Apache Airflow and Apache Airflow MySQL Provider	21 Jan 202315:30	–	github
Prion	Command injection	21 Jan 202314:15	–	prion
Veracode	Command Injection	25 Jan 202305:48	–	veracode
NVD	CVE-2023-22884	21 Jan 202314:15	–	nvd

[
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "2.5.1",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Apache Airflow MySQL Provider",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "lessThan": "4.0.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/apache/airflow/pull/28811
lists	www.lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

21 Jan 2023 13:02Current

9.7High risk

Vulners AI Score9.7

EPSS0.00783

CWE-77