Exploit for Command Injection in Apache Airflow

🗓️ 29 Jul 2023 09:26:36Reported by jakabakosType

githubexploit

githubexploit🔗 github.com👁 693 Views

Apache Airflow Command Injection CVE-2023-22884 PoC for RCE

Reporter	Title	Published	Views	Family All 26
BDU FSTEC	The vulnerability of the Airflow MySQL Provider software, which is used for creating, monitoring, and orchestrating data processing scenarios, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.	3 Feb 202300:00	–	bdu_fstec
Circl	CVE-2023-22884	21 Jan 202316:03	–	circl
CNNVD	Apache Airflow 命令注入漏洞	21 Jan 202300:00	–	cnnvd
CVE	CVE-2023-22884	21 Jan 202313:02	–	cve
Cvelist	CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow	21 Jan 202313:02	–	cvelist
GithubExploit	Exploit for Command Injection in Apache Airflow	29 Jul 202309:26	–	githubexploit
Github Security Blog	Command Injection in Apache Airflow and Apache Airflow MySQL Provider	21 Jan 202315:30	–	github
NCSC	Vulnerabilities fixed in Zoom	16 Mar 202300:00	–	ncsc
NVD	CVE-2023-22884	21 Jan 202314:15	–	nvd
OSV	BIT-AIRFLOW-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow	6 Mar 202410:55	–	osv

14 Feb 2025 17:11Current

10High risk

Vulners AI Score10

CVSS 3.19.8

EPSS0.11082

SSVC

apache airflow command injection cve-2023-22884 rce vulnerability sanitization exploit defense