Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-38362

Docker Provider <3.0 RCE vulnerability in example dag

Description

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Apache Software Foundation Apache Airflow

  • Apache Airflow Docker Provider to < 3.0.0affected

References