PoC-for-CVE-2021-38540-

CVE-2021-38540 概念実証 CVE-2021-38540として知られる重要なコンポーネントにおける認証欠如 このバグについて: 変数インポートエンドポイントは、Airflow =2.0.0, =2.0.0, variables 変数のリスト の下に kafkacaptainhookuser という名前の変数を作成するリクエストを含んでいます。 PoCソース: root@kitploit: POST /variable/varimport HTTP/2 Host: airflow.example.com User-Agent: Mozilla/5.0 X11; Linux...

CVE-2021-38540

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

BIT-AIRFLOW-2021-38540 Apache Airflow: Variable Import endpoint missed authentication check

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

GHSA-H88F-R7CW-8FV3 Missing Authentication for Critical Function in Apache Airflow

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

CVE-2021-38540

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

PYSEC-2021-326

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...

PYSEC-2021-326

The variable import endpoint was not protected by authentication in Airflow =2.0.0, =2.0.0, 2.1.3...