CVE-2022-38362 — Docker Provider <3.0 RCE vulnerability in example dag

CVE-2022-38362

Docker Provider <3.0 RCE vulnerability in example dag PUBLISHED

Description (CNA)

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Airflow	affected Apache Airflow Docker Provider before 3.0.0

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb
http://www.openwall.com/lists/oss-security/2022/08/16/1

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb
http://www.openwall.com/lists/oss-security/2022/08/16/1