7 matches found
Apache Airflow: RCE by race condition in example_xcom dag
The example examplexcomthat was included in airflow documentation implemented unsafe pattern of reading valuefrom xcom in the way that could be exploited to allow UI user who had access to modify XComs to perform arbitraryexecution of code on the worker. Since the UI users are already highly...
8.1CVSS5.9AI score0.00579EPSS
SaveExploits0References7Affected Software1
20