high8.8
CVE-2022-38362
Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow w…
Impact
Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Apache-Airflow-Providers-Docker | before 3.0.0 |