Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.
References
Link | Resource |
---|---|
https://github.com/apache/airflow/pull/28811 | Patch Third Party Advisory |
https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h | Mailing List Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 04:07
Type | Values Removed | Values Added |
---|---|---|
Summary | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0. |
22 May 2023, 14:26
Type | Values Removed | Values Added |
---|---|---|
First Time |
Apache apache-airflow-providers-mysql
|
|
CPE | cpe:2.3:a:apache:apache-airflow-providers-mysql:*:*:*:*:*:*:*:* |
31 Jan 2023, 17:18
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
References | (MISC) https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h - Mailing List, Third Party Advisory | |
References | (MISC) https://github.com/apache/airflow/pull/28811 - Patch, Third Party Advisory | |
CPE | cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:* cpe:2.3:a:apache:airflow_mysql_provider:*:*:*:*:*:*:*:* |
|
First Time |
Apache airflow Mysql Provider
Apache airflow Apache |
21 Jan 2023, 14:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-01-21 14:15
Updated : 2023-12-10 14:48
NVD link : CVE-2023-22884
Mitre link : CVE-2023-22884
CVE.ORG link : CVE-2023-22884
JSON object : View
Products Affected
apache
- apache-airflow-providers-mysql
- airflow
CWE
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')