Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.
References
| Link | Resource |
|---|---|
| https://github.com/apache/airflow/pull/28811 | Patch Third Party Advisory |
| https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h | Mailing List Third Party Advisory |
| https://github.com/apache/airflow/pull/28811 | Patch Third Party Advisory |
| https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/apache/airflow/pull/28811 - Patch, Third Party Advisory | |
| References | () https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h - Mailing List, Third Party Advisory |
07 Nov 2023, 04:07
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0. |
Information
Published : 2023-01-21 14:15
Updated : 2024-11-21 07:45
NVD link : CVE-2023-22884
Mitre link : CVE-2023-22884
CVE.ORG link : CVE-2023-22884
JSON object : View
Products Affected
apache
- apache-airflow-providers-mysql
- airflow
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')