Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2017-15720

In Apache Airflow 1.8.2 and earlier, an authenticated user can execute code remotely on the Airflow webserver by creating a special object.

VectorNETWORK

PublishedJan 23, 2019, 17:29

Published Bysecurity@apache.org

Base Score

Score8.8

Package (Ecosystem)IntroducedFixedLimit

apache-airflow(PyPI)01.9.0N/A

CWE-20

Base Score

8.8

Vector String

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Base SeverityHigh

Version

3.0

Attack Vector (AV)

NETWORK