Lucene search

GitHub Advisory DatabaseGHSA-3V7G-4PG3-7R6J

HistoryFeb 26, 2022 - 12:00 a.m.

OS Command injection in Apache Airflow

2022-02-2600:00:44

CWE-78

GitHub Advisory Database

github.com

apache airflow

os command injection

version 2.2.4

web ui.

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.949

Percentile

99.3%

JSON

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

Affected configurations

Vulners

Node

apacheairflowRange<2.2.4

References

github.com/advisories/GHSA-3v7g-4pg3-7r6j

lists.apache.org/thread/dbw5ozcmr0h0lhs0yjph7xdc64oht23t

nvd.nist.gov/vuln/detail/CVE-2022-24288

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.949

Percentile

99.3%

JSON

Related for GHSA-3V7G-4PG3-7R6J