CVE-2024-56373
Last modified
CVE-2024-56373 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should normally not be able to do, leading to potentially remote code execution in the context of web-server (server-side) as a result of a user viewing historical task information. The functionality responsible for that (log template history) has been disabled by default in 2.11.1 and users should upgrade to Airflow 3 if they want to continue to use log template history. They can also manually modify historical log file names if they want to see historical logs that were generated before the last log template change.. EPSS estimates a 1.13% chance of exploitation in the next 30 days.
Description
DAG Author (who already has quite a lot of permissions) could manipulate database of Airflow 2 in the way to execute arbitrary code in the web-server context, which they should normally not be able to do, leading to potentially remote code execution in the context of web-server (server-side) as a result of a user viewing historical task information. The functionality responsible for that (log template history) has been disabled by default in 2.11.1 and users should upgrade to Airflow 3 if they want to continue to use log template history. They can also manually modify historical log file names if they want to see historical logs that were generated before the last log template change.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Airflow | < 2.11.1 |
References
- https://github.com/apache/airflow/pull/61880Issue Tracking
- https://lists.apache.org/thread/2vrmrhcht6g7cp5yjxpnrk2wtrncm6cyMailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2026/02/23/3Mailing List, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-56373?
How severe is CVE-2024-56373?
How do I fix CVE-2024-56373?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-56366PhpSpreadsheet is a PHP library for reading and writing spre…5.4
- CVE-2024-56368In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-56369In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-5637The Market Exporter plugin for WordPress is vulnerable to un…8.1
- CVE-2024-56370Net::Xero 0.044 and earlier for Perl uses the rand() functio…6.5
- CVE-2024-56372In the Linux kernel, the following vulnerability has been re…5.5
- CVE-2024-56374An issue was discovered in Django 5.1 before 5.1.5, 5.0 befo…7.5
- CVE-2024-56375An integer underflow was discovered in Fort 1.6.3 and 1.6.4 …7.5
- CVE-2024-56376A stored cross-site scripting (XSS) vulnerability in the bui…5.4
- CVE-2024-56377A stored cross-site scripting (XSS) vulnerability in survey …5.4
- CVE-2024-56378libpoppler.so in Poppler through 24.12.0 has an out-of-bound…4.3
- CVE-2024-5638The Formula theme for WordPress is vulnerable to Reflected C…6.1
Are you affected by CVE-2024-56373?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST