Description
Apache Airflow存在远程代码执行漏洞，此漏洞是缺乏验证导致的。
Apache Airflow CVE-2020-11978远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/cve-2020-11978
https://www.sentinelone.com/vulnerability-database/cve-2020-11978/
https://github.com/pberba/CVE-2020-11978
https://pberba.github.io/security/2021/06/05/cve-2020-11978/
https://www.exploit-db.com/exploits/49927
https://www.endorlabs.com/vulnerability/cve-2020-11978
https://lists.apache.org/thread/cn57zwylxsnzjyjztwqxpmly0x9q5ljx
https://access.redhat.com/security/cve/cve-2020-11978
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=33104
https://ccb.belgium.be/advisories/warning-combination-existing-vulnerabilities-apache-airflow-version-11010-can-lead
https://www.tenable.com/plugins/nessus/162136