CVE-2024-32077

CVSS V2 None CVSS V3 None

Description

Apache Airflow version 2.9.0 has a vulnerability that allows an authenticated attacker to inject malicious data into the task instance logs. Users are recommended to upgrade to version 2.9.1, which fixes this issue.

Overview

CVE ID
CVE-2024-32077

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-05-14T10:43:20.299Z

Last Modified Date
2024-05-14T10:43:20.299Z

Weakness Enumerations

CWE	URL
CWE-79	http://cwe.mitre.org/data/definitions/79.html

References

Reference URL	Reference Tags
https://github.com/apache/airflow/pull/38882	patch
https://lists.apache.org/thread/gsjmnrqb3m5fzp0vgpty1jxcywo91v77	vendor-advisory
http://www.openwall.com/lists/oss-security/2024/05/14/1

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-32077
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32077

History

Created	Old Value	New Value	Data Type	Notes
2024-06-26 08:51:46				Added to TrackCVE