CVE-2020-11981-PoC

例 デモ環境の構築 docker-compose up -d VM docker-container: 172.18.0.2 PoCコマンド docker build -t scan11981 . docker run -v /tmp/:/output --network exploit -t scan11981 --targets 172.18.0.2:6379 --output /output/result.txt cat /tmp/result.txt 情報 脆弱性の説明: この脆弱性は、CeleryExecutorとRedisをブローカーとして使用する際のApache...

Exploit for OS Command Injection in Apache Airflow

Example Build demo stand bash docker-compose up -d...

CVE-2020-11981

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker Redis, RabbitMQ directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands...