CVE-2024-38363 Remote Code Execution (RCE) via Server Side Template Injection (SSTI) in Airbyte

Airbyte is a data integration platform for ELT pipelines. Airbyte connection builder docker image is vulnerable to RCE via SSTI which allows an authenticated remote attacker to execute arbitrary code on the server as the web server user. The connection builder is used to create and test new...

Airbyte Security Breach

Airbyte is an ETL/ELT data pipeline data integration platform from Airbyte Open Source. A security vulnerability exists in Airbyte versions prior to v0.62.2 that stems from the presence of a remote code execution vulnerability that allows an authenticated, remote attacker to execute arbitrary cod...

PT-2024-27960 · Airbyte · Airbyte

Name of the Vulnerable Software and Affected Versions: Airbyte versions prior to 0.62.2 Description: The Airbyte connection builder docker image is vulnerable to remote code execution RCE via server-side template injection SSTI, allowing an authenticated remote attacker to execute arbitrary code ...