CVE-2017-15720
published 2019-01-23CVE-2017-15720: In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
high8.8CVSS 3.0
AVNACLPRLUINSUCHIHAH
In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | airflow | <= 1.8.2 | — |
| apache_software_foundation | apache_airflow | — | — |