CVE-2022-38362

Docker Provider <3.0 RCE vulnerability in example dag

published August 16, 2022

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01897 · 79.5th percentile
Published
2022-08-16T14:10Z
EPSS history
Timeline
  • 16 AUG 14:10Z
    Docker Provider <3.0 RCE vulnerability in example dag
    cvelistv5