CVE-2020-11981
30Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendepss 37%
probabilidad de explotación
37%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
An issue was found in Apache Airflow versions 1.10.10 and below. When using CeleryExecutor, if an attacker can connect to the broker (Redis, RabbitMQ) directly, it is possible to inject commands, resulting in the celery worker running arbitrary commands.
Productos afectados
Apache Software Foundation · Apache Airflow