airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-15720 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-15720 Source advisory: GHSA-8FG4-J562-MJRC...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-15720 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-15720 Source advisory: OSV:GHSA-8FG4-J562-MJRC...

CVE-2017-15720

creationtimestamp| type| source ---|---|--- 2019-01-23 20:21:36+00:00| seen| https://t.me/cibsecurity/2199...

airflow-imaging-plugins (>=2.4.2, <=2.4.3), data-tracking (1.7.2) +1 more potentially affected by CVE-2017-15720 via apache-airflow (1.8.2)

apache-airflow PYPI version 1.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow and may be impacted: - airflow-imaging-plugins =2.4.2, =0.0.5, =0.0.6 Source cves: CVE-2017-15720 Source advisory: OSV:PYSEC-2019-147...

CVE-2017-15720

In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object...

CVE-2017-15720

CVE-2017-15720 affects Apache Airflow 1.8.2 and earlier. An authenticated user can trigger remote code execution on the Airflow webserver by creating a specially crafted object. Reported in multiple feeds (NVD, GHSA, OSV, CNVD/CVE records), the exposure is described as remote code execution with ...