CVE-2023-22884 — CVE-2023-22884

CVE-2023-22884

CRITICAL · CVSS 9.8

EPSS exploitation probability: 0%

Published 2023-01-21T14:15:10.280 · Last modified 2026-06-17T05:36:20.893

Summary

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow, Apache Software Foundation Apache Airflow MySQL Provider.This issue affects Apache Airflow: before 2.5.1; Apache Airflow MySQL Provider: before 4.0.0.

Affected products

apache — airflow

Does this affect you?

Add your gear to cvedb and we'll alert you only when apache ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.