Lucene search

Remote Code Execution (RCE)

🗓️ 17 Aug 2022 04:26:35Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 19 Views

apache-airflow RCE vulnerability using context manage

Reporter	Title	Published	Views	Family All 8
OSV	Remote code execution in Apache Airflow Docker's Provider	17 Aug 202200:00	–	osv
CNVD	Apache Airflow Remote Code Execution Vulnerability (CNVD-2022-59057)	19 Aug 202200:00	–	cnvd
Hacker One	Internet Bug Bounty: CVE-2022-38362: Apache Airflow Docker Provider <3.0 RCE vulnerability in example dag	16 Aug 202215:02	–	hackerone
Cvelist	CVE-2022-38362 Docker Provider <3.0 RCE vulnerability in example dag	16 Aug 202214:10	–	cvelist
Prion	Design/Logic Flaw	16 Aug 202214:15	–	prion
NVD	CVE-2022-38362	16 Aug 202214:15	–	nvd
CVE	CVE-2022-38362	16 Aug 202214:15	–	cve
Github Security Blog	Remote code execution in Apache Airflow Docker's Provider	17 Aug 202200:00	–	github

Vulners

Node

apache airflowRange≤1.10.15

apache airflowRange≤2.3.2

Source	Link
github	www.github.com/apache/airflow/pull/24007
github	www.github.com/apache/airflow/commit/56fd04016f1a8561f1c02e7f756bab8805c05876
lists	www.lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb
github	www.github.com/advisories/GHSA-746v-hfh2-xphm
openwall	www.openwall.com/lists/oss-security/2022/08/16/1
openwall	www.openwall.com/lists/oss-security/2022/08/16/1

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Aug 2022 04:35Current

9High risk

Vulners AI Score9

EPSS0.00148