Apache Airflow CVE-2023-22884 RCE vulnerability affecting versions prior to 2.4.0. Includes command injection in LOAD DATA LOCAL INFILE statement. See the example DAG in the dags folder
Reporter | Title | Published | Views | Family All 10 |
---|---|---|---|---|
![]() | Command Injection in Apache Airflow and Apache Airflow MySQL Provider | 21 Jan 202315:30 | – | osv |
![]() | CVE-2023-22884 | 21 Jan 202314:15 | – | osv |
![]() | BIT-airflow-2023-22884 | 6 Mar 202410:55 | – | osv |
![]() | CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow | 21 Jan 202313:02 | – | cvelist |
![]() | Command Injection in Apache Airflow and Apache Airflow MySQL Provider | 21 Jan 202315:30 | – | github |
![]() | Command injection | 21 Jan 202314:15 | – | prion |
![]() | Command Injection | 25 Jan 202305:48 | – | veracode |
![]() | CVE-2023-22884 | 21 Jan 202314:15 | – | nvd |
![]() | CVE-2023-22884 | 21 Jan 202314:15 | – | cve |
![]() | Exploit for Command Injection in Apache Airflow | 29 Jul 202309:26 | – | githubexploit |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo