Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache Airflow 2.3.0 Clear all filters
TI-2022-19497 CVE-2022-40954 · GHSA-45r6-j3cc-6mxx

Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files

Priority LOW 28

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution co…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0139 Published 2022-11-22 Fixed in 4.0.0, 2.3.0 CWE-78
TI-2022-19056 CVE-2022-40189 · GHSA-rmf2-pwfq-h75j

Apache Airlfow Pig Provider RCE

Priority MEDIUM 56

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task executio…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04158 Published 2022-11-22 Fixed in 4.0.0, 2.3.0 CWE-78
TI-2022-18182 CVE-2022-38649 · GHSA-7wqf-h36w-47mc

Apache Airflow Pinot provider allowed Command Injection

Priority MEDIUM 55

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Pinot Provider, Apache Airflow allows an attacker to control commands executed in the task execut…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03404 Published 2022-11-22 Fixed in 4.0.0, 2.3.0 CWE-78