CVE-2022-24288

HIGH · CVSS 8.8 EPSS 77.88%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-25 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-24288

Severity

HIGH

CVSS

8.8

EPSS

77.88%

Apache

Original NVD Description

In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.