Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-24288
HistoryFeb 25, 2022 - 9:15 a.m.

Command injection

2022-02-2509:15:00
PRIOn knowledge base
www.prio-n.com
6
apache airflow
command injection
os command injection
web ui
vulnerability

AI Score

8.9

Confidence

High

EPSS

0.947

Percentile

99.3%

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

AI Score

8.9

Confidence

High

EPSS

0.947

Percentile

99.3%