In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: apache

Published: 2022-02-25T08:30:16

Updated: 2024-08-03T04:07:02.359Z

Reserved: 2022-02-01T00:00:00

Link: CVE-2022-24288

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-02-25T09:15:06.957

Modified: 2022-03-04T20:41:03.443

Link: CVE-2022-24288

cve-icon Redhat

No data.