by @jakaba
03 Aug 2023

RCE via example DAG in Apache Airflow (CVE-2022-40127) - Exploit

by @jakaba
03 Aug 2023

RCE via example DAG in Apache Airflow (CVE-2022-40127) - Exploit

Apps

A
AirflowApache

PoC video

Summary

The provided Python code is an exploit script targeting CVE-2022-40127, a Remote Code Execution (RCE) vulnerability in Apache Airflow versions before 2.4.0. The vulnerability arises due to insufficient validation of user-supplied inputs, which allows an attacker to execute arbitrary code on the target system

general

Description

users/photos/clj8b3h1k16g10uoihwvzgsxi.png

@jakaba

74 posts

Total vcoins

0

Social media links

Comments (0)