3347 matches found
CVE-2024-39877 Apache Airflow: DAG Author Code Execution possibility in airflow-scheduler
Apache Airflow 2.4.0, and versions before 2.9.3, has a vulnerability that allows authenticated DAG authors to craft a docmd parameter in a way that could execute arbitrary code in the scheduler context, which should be forbidden according to the Airflow Security model. Users should upgrade to...
CVE-2024-39863 Apache Airflow: Potential XSS Vulnerability
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue...
CVE-2024-39863
CVE-2024-39863 affects Apache Airflow up to version 2.9.3 prior to the fix. An authenticated attacker can inject a malicious link during provider installation. Users should upgrade to Airflow 2.9.3 to remediate. Other connected sources corroborate the vulnerability in the same version range and d...
CVE-2024-39863 Apache Airflow: Potential XSS Vulnerability
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue...
CVE-2024-39863 Apache Airflow: Potential XSS Vulnerability
Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue...
Cross-Site Scripting Vulnerability in Apache Airflow
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has a cross-site scripting vulnerability that can be exploited by an...
Apache Airflow 代码注入漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a code execution vulnerability that can be exploited by...
The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in improper code generation, allowing attackers to execute arbitrary code.
The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing specially crafted .md files...
Apache Airflow 跨站脚本漏洞
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow has a cross-site scripting vulnerability that can be exploited by an...
Apache Airflow code execution vulnerability (CNVD-2024-33592)
Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. Apache Airflow suffers from a code execution vulnerability that can be exploited by...
PT-2024-4769 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions 2.4.0 through 2.9.3 Description: This vulnerability allows authenticated DAG authors to craft a malicious doc md parameter, potentially leading to arbitrary code execution within the scheduler context. This bypasses...
PT-2024-5041 · Apache · Apache Airflow
Name of the Vulnerable Software and Affected Versions: Apache Airflow versions prior to 2.9.3 Description: The issue is related to the lack of protection for the web page structure in the Provider component of Apache Airflow, allowing an authenticated attacker to inject a malicious link when...
GHSA-CX63-2MW6-8HW5 vulnerabilities
Vulnerabilities for packages: reflex, py3-cassandra-medusa, nvidia-nsight-compute-13.2, superset, checkov, kubeflow-katib, py3.9-setuptools, py3-pipenv, airflow, nvidia-nsight-compute-13.1, k8s-sidecar, az, nemo, request-1276...
CVE-2024-6345 vulnerabilities
Vulnerabilities for packages: reflex, py3-cassandra-medusa, nvidia-nsight-compute-13.2, superset, checkov, kubeflow-katib, py3.9-setuptools, py3-pipenv, airflow, nvidia-nsight-compute-13.1, k8s-sidecar, az, nemo, request-1276...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, kubeflow-pipelines, az, py3-cassandra-medusa, nvidia-nsight-compute-13.2, patroni, py3-certifi, dask-gateway, reflex, superset, confluent-docker-utils,...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, kubeflow-pipelines, az, py3-cassandra-medusa, nvidia-nsight-compute-13.2, patroni, py3-certifi, dask-gateway, reflex, superset, confluent-docker-utils,...
MAL-2024-5182 Malicious code in glovo-data-platform-declarative-airflow (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in glovo-data-platform-declarative-airflow (PyPI)
--- -= Per source details. Do not edit below this line.=-...