CVE-2022-46421
Assigner: apache
Published: 2022-12-20T10:20:39.431Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Apache Airflow Hive Provider
vendor: Apache Software Foundation
versions: lessThan: 5.0.0
status: affected
version: 0
versionType: semver
credits: type: finder
value: id_No2015429 of 3H Security Team
descriptions: supportingMedia: base64: no
type: text/html
value: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.<p>This issue affects Apache Airflow Hive Provider: before 5.0.0.</p>
value: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.


metrics: other: content: text: moderate
type: Textual description of severity
problemTypes: descriptions: cweId: CWE-77
description: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
type: CWE
source: discovery: EXTERNAL
title: Apache Airflow Hive Provider: Hive Provider RCE vulnerability with hive_cli_params
x_generator: engine: Vulnogram 0.1.0-dev