GitHub Advisoryadvisory · PyPI

GHSA-976r-qfjj-c24w Command injection via Celery broker in Apache Airflow

CRITICAL Published 2020-07-27 Modified 2024-09-11 Official page ↗
Aliases
CVE-2020-11981
Ecosystem
PyPI
Packages
apache-airflow
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78
Reviewed
2020-07-27

Affected packages

• PyPI apache-airflow: < 1.10.11rc1 → fixed in 1.10.11rc1

Description

An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.

Related

Alias · CVE (1)

  • CVE-2020-11981 An issue was found in Apache Airflow versions 1.10.10 and below. vulnerability

Weakness · CWE (1)

  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References