← Back to browse · API

CVE-2023-22884

Severity
CRITICAL
CVSS
9.8
EPSS
0.11082
Risk score
43.08
CISA KEV
No
PoC
No
Published
2023-01-21
Modified
2025-03-31
First seen
2026-08-07
Aliases
EUVD-2023-0440, GHSA-C732-XVV8-G94C, PYSEC-2026-268, PYSEC-2026-279
Products
Apache Software Foundation:Apache Airflow 0 <2.5.1, Apache Software Foundation:Apache Airflow MySQL Provider 0 <4.0.0
Sources
euvd EUVD-2023-0440

Description

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.

References