Beveiligingsadvies

CVE-2020-11981

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-07-16 23:21:18

Laatst bijgewerkt 2024-08-04 11:48:57

Toegewezen door apache

CVSS-score geen score

Status PUBLISHED

Beschrijving

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.

← Alle CVE's bekijken Bekijk op cve.org ↗