CVE-2023-22884

Advisory

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider. This issue affects Apache Airflow before 2.5.1 and Apache Airflow MySQL Provider before 4.0.0.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-c732-xvv8-g94c
• https://nvd.nist.gov/vuln/detail/CVE-2023-22884
• https://github.com/apache/airflow/pull/28811
• https://github.com/apache/airflow
• https://lists.apache.org/thread/0l0j3nt0t7fzrcjl2ch0jgj6c58kxs5h
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22884