Airflow-Diagrams v2.1.0 was discovered to contain an arbitrary file upload vulnerability in the unsafe_load function at cli.py. This vulnerability allows attackers to execute arbitrary code via uploading a crafted YML file.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/bayuncao/vul-cve-15 |
History
Tue, 27 Aug 2024 22:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Weaknesses | CWE-434 | |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-03-14T00:00:00
Updated: 2024-08-27T20:13:27.496Z
Reserved: 2024-03-08T00:00:00
Link: CVE-2024-28423
Vulnrichment
Updated: 2024-08-02T00:56:57.937Z
NVD
Status : Awaiting Analysis
Published: 2024-03-14T19:15:50.877
Modified: 2024-08-27T21:35:18.580
Link: CVE-2024-28423
Redhat
No data.