Description
Apache Airflow 是一个可编程，调度和监控的工作流平台，基于有向无环图(DAG)，Airflow 可以定义一组有依赖的任务，按照依赖依次执行。
Apache Airflow < 2.4.0 example dag 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.cnblogs.com/xiangpasama/p/16952833.html
https://zhuanlan.zhihu.com/p/687753427
https://github.com/Threekiii/Vulnerability-Wiki/blob/master/docs-base/docs/webapp/Apache-Airflow-%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E-CVE-2022-40127.md
https://zone.ci/aliyun/ali_highrisk/11043.html
https://juejin.cn/post/7175138544012984379
https://www.vicarius.io/vsociety/posts/rce-via-example-dag-in-apache-airflow-cve-2022-40127
https://blog.csdn.net/sycamorelg/article/details/125601941
https://mrxn.net/jswz/701.html
https://hackerone.com/reports/1776476
https://pentest-tools.com/vulnerabilities-exploits/airflow-240-remote-code-execution_3147
https://nvd.nist.gov/vuln/detail/CVE-2022-40127
https://lists.apache.org/thread/cf132hgm6jvzvsbpsozl3plf1r4cwysy