Lucene search
+L

73 matches found

Cvelist
Cvelist
added 2022/12/20 10:20 a.m.51 views

CVE-2022-46421 Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

9.8AI score0.0322EPSS
SaveExploits0References2
CVE
CVE
added 2022/12/20 10:20 a.m.117 views

CVE-2022-46421

CVE-2022-46421 involves the Apache Airflow Hive Provider (Apache Software Foundation) and is a Command Injection vulnerability caused by improper neutralization of special elements. The issue affects the Hive Provider: before 5.0.0 . The available documents describe the vulnerability type and aff...

9.8CVSS9.6AI score0.0322EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/12/20 10:20 a.m.21 views

CVE-2022-46421 Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params

Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0...

9.8CVSS7.2AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/12/20 12:00 a.m.9 views

PT-2022-27865

Name of the Vulnerable Software and Affected Versions Apache Airflow Hive Provider versions prior to 5.0.0 Description The issue is related to an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in Apache Airflow Hive Provider. This vulnerability...

9.8CVSS7.5AI score0.0322EPSS
SaveExploits0References11
OSV
OSV
added 2022/11/22 12:30 p.m.67 views

GHSA-CM43-F2PV-6V68 OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.9AI score0.01825EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/11/22 12:30 p.m.46 views

OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.7AI score0.01825EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2022/11/22 10:15 a.m.38 views

CVE-2022-41131

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS0.01825EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/22 10:15 a.m.32 views

Command injection

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

4.3CVSS7.9AI score0.01825EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2022/11/22 12:00 a.m.116 views

CVE-2022-41131

The CVE-2022-41131 issue is an OS command injection in the Apache Airflow Hive Provider. Vulnerable components: Hive Provider versions prior to 4.1.0, and Airflow versions prior to 2.3.0 if the Hive Provider is installed. Root cause is improper neutralization of special elements in OS commands, a...

7.8CVSS7.9AI score0.01825EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
added 2022/11/22 12:00 a.m.46 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

8.2AI score0.01825EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2022/11/22 12:00 a.m.6 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.9AI score0.01825EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/11/22 12:00 a.m.15 views

PT-2022-25664

Name of the Vulnerable Software and Affected Versions Apache Airflow Hive Provider versions prior to 4.1.0 Apache Airflow versions prior to 2.3.0 Description The issue is related to an improper neutralization of special elements used in an OS command, also known as 'OS Command Injection'. This...

7.8CVSS7.4AI score0.01825EPSS
SaveExploits0References11
OSV
OSV
added 2022/11/22 12:00 a.m.27 views

CVE-2022-41131 Apache Airflow Hive Provider vulnerability (command injection via hive_cli connection)

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Hive Provider, Apache Airflow allows an attacker to execute arbtrary commands in the task execution context, without write access to DAG files. This issue affects Hive Provider...

7.8CVSS7.3AI score
SaveExploits0References4
Rows per page
Query Builder