CVE-2020-11978

8.8HIGH

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any auth

게시됨: 7/17/2020업데이트됨: 10/23/2025
NVD에서 보기MITRE에서 보기

CISA 알려진 악용 취약점

A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow.

필요한 조치:

Apply updates per vendor instructions.

마감일:

2022-07-18

설명

An issue was found in Apache Airflow versions 1.10.10 and below. A remote code/command injection vulnerability was discovered in one of the example DAGs shipped with Airflow which would allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler (depending on the executor in use). If you already have examples disabled by setting load_examples=False in the config then you are not vulnerable.

AI 분석AI 기반

영향받는 제품

apacheairflow

사용 가능한 익스플로잇 (1)

참조