CVE-2022-38362 – Docker Provider <3.0 RCE vulnerability in example dag

https://notcve.org/view.php?id=CVE-2022-38362

Apache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host. El Proveedor de Apache Airflow Docker versiones anteriores a 3.0.0, incluía un ejemplo de DAG que era vulnerable a una explotación remota (autenticada) de código en el host del trabajador de Airflow. • http://www.openwall.com/lists/oss-security/2022/08/16/1 https://lists.apache.org/thread/614p38nf4gbk8xhvnskj9b1sqo2dknkb •