PT-2024-22426
CVE-2024-28423
·
تاريخ النشر
2024-03-14
·
تاريخ التحديث
2025-09-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Airflow-Diagrams version 2.1.0
Description
The issue is related to an arbitrary file upload vulnerability in the
unsafe load function at cli.py. This allows attackers to execute arbitrary code via uploading a crafted YML file.Recommendations
For Airflow-Diagrams version 2.1.0, consider disabling the
unsafe load function at cli.py until a patch is available to prevent the execution of arbitrary code. Restrict access to uploading files, especially YML files, to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾